Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-48795 (GCVE-0-2023-48795)
Vulnerability from cvelistv5 – Published: 2023-12-18 00:00 – Updated: 2026-05-12 11:02
VLAI
EPSS
Summary
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.
Severity
5.9 (Medium)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- n/a
- CWE-354 - Improper Validation of Integrity Check Value
Assigner
References
139 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Siemens | RUGGEDCOM APE1808 |
Affected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
|
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
|
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-04T22:05:21.417Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit"
},
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://matt.ucc.asn.au/dropbear/CHANGES"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.netsarang.com/en/xshell-update-history/"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.paramiko.org/changelog.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openssh.com/openbsd.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openssh/openssh-portable/commits/master"
},
{
"tags": [
"x_transferred"
],
"url": "https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.bitvise.com/ssh-server-version-history"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/ronf/asyncssh/tags"
},
{
"tags": [
"x_transferred"
],
"url": "https://gitlab.com/libssh/libssh-mirror/-/tags"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openssh.com/txt/release-9.6"
},
{
"tags": [
"x_transferred"
],
"url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.terrapin-attack.com"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst"
},
{
"tags": [
"x_transferred"
],
"url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway/"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/warp-tech/russh/releases/tag/v0.40.2"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openwall.com/lists/oss-security/2023/12/18/2"
},
{
"tags": [
"x_transferred"
],
"url": "https://twitter.com/TrueSkrillor/status/1736774389725565005"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/paramiko/paramiko/issues/2337"
},
{
"tags": [
"x_transferred"
],
"url": "https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38684904"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38685286"
},
{
"name": "[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/18/3"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mwiede/jsch/issues/457"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.1"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/advisories/GHSA-45x7-px36-x8w8"
},
{
"tags": [
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/source-package/libssh2"
},
{
"tags": [
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg"
},
{
"tags": [
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/CVE-2023-48795"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugs.gentoo.org/920280"
},
{
"tags": [
"x_transferred"
],
"url": "https://ubuntu.com/security/CVE-2023-48795"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/"
},
{
"tags": [
"x_transferred"
],
"url": "https://access.redhat.com/security/cve/cve-2023-48795"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mwiede/jsch/pull/461"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/libssh2/libssh2/pull/1291"
},
{
"tags": [
"x_transferred"
],
"url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/rapier1/hpn-ssh/releases"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/proftpd/proftpd/issues/456"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15"
},
{
"tags": [
"x_transferred"
],
"url": "https://oryx-embedded.com/download/#changelog"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3"
},
{
"tags": [
"x_transferred"
],
"url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC"
},
{
"tags": [
"x_transferred"
],
"url": "https://crates.io/crates/thrussh/versions"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/NixOS/nixpkgs/pull/275249"
},
{
"name": "[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/19/5"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc"
},
{
"tags": [
"x_transferred"
],
"url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/"
},
{
"name": "[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/20/3"
},
{
"tags": [
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/apache/mina-sshd/issues/445"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/hierynomus/sshj/issues/916"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/janmojzis/tinyssh/issues/81"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openwall.com/lists/oss-security/2023/12/20/3"
},
{
"tags": [
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/source-package/trilead-ssh2"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16"
},
{
"name": "FEDORA-2023-0733306be9",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/"
},
{
"name": "DSA-5586",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.debian.org/security/2023/dsa-5586"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.theregister.com/2023/12/20/terrapin_attack_ssh"
},
{
"tags": [
"x_transferred"
],
"url": "https://filezilla-project.org/versions.php"
},
{
"tags": [
"x_transferred"
],
"url": "https://nova.app/releases/#v11.8"
},
{
"tags": [
"x_transferred"
],
"url": "https://roumenpetrov.info/secsh/#news20231220"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.vandyke.com/products/securecrt/history.txt"
},
{
"tags": [
"x_transferred"
],
"url": "https://help.panic.com/releasenotes/transmit5/"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/PowerShell/Win32-OpenSSH/issues/2189"
},
{
"tags": [
"x_transferred"
],
"url": "https://winscp.net/eng/docs/history#6.2.2"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.bitvise.com/ssh-client-version-history#933"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/cyd01/KiTTY/issues/520"
},
{
"name": "DSA-5588",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.debian.org/security/2023/dsa-5588"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/ssh-mitm/ssh-mitm/issues/165"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38732005"
},
{
"name": "[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html"
},
{
"name": "GLSA-202312-16",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202312-16"
},
{
"name": "GLSA-202312-17",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202312-17"
},
{
"name": "FEDORA-2023-20feb865d8",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/"
},
{
"name": "FEDORA-2023-cb8c606fbb",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/"
},
{
"name": "FEDORA-2023-e77300e4b5",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/"
},
{
"name": "FEDORA-2023-b87ec6cf47",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/"
},
{
"name": "FEDORA-2023-153404713b",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20240105-0004/"
},
{
"name": "FEDORA-2024-3bb23c77f3",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/"
},
{
"name": "FEDORA-2023-55800423a8",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/"
},
{
"name": "FEDORA-2024-d946b9ad25",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/"
},
{
"name": "FEDORA-2024-71c2c6526c",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/"
},
{
"name": "FEDORA-2024-39a8c72ea9",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/"
},
{
"tags": [
"x_transferred"
],
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002"
},
{
"name": "FEDORA-2024-ae653fb07b",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/"
},
{
"name": "FEDORA-2024-2705241461",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/"
},
{
"name": "FEDORA-2024-fb32950d11",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/"
},
{
"name": "FEDORA-2024-7b08207cdb",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/"
},
{
"name": "FEDORA-2024-06ebb70bdd",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/"
},
{
"name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html"
},
{
"name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html"
},
{
"name": "FEDORA-2024-a53b24023d",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/"
},
{
"name": "FEDORA-2024-3fd1bc9276",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.apple.com/kb/HT214084"
},
{
"name": "20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2024/Mar/21"
},
{
"name": "[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html"
},
{
"name": "[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2024/04/17/8"
},
{
"name": "[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2024/03/06/3"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-48795",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2023-12-22T05:01:05.519910Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-354",
"description": "CWE-354 Improper Validation of Integrity Check Value",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-27T20:45:57.733Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM APE1808",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-12T11:02:25.905Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-364175.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
}
],
"x_adpType": "supplier"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-01T18:06:23.972Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"
},
{
"url": "https://matt.ucc.asn.au/dropbear/CHANGES"
},
{
"url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES"
},
{
"url": "https://www.netsarang.com/en/xshell-update-history/"
},
{
"url": "https://www.paramiko.org/changelog.html"
},
{
"url": "https://www.openssh.com/openbsd.html"
},
{
"url": "https://github.com/openssh/openssh-portable/commits/master"
},
{
"url": "https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ"
},
{
"url": "https://www.bitvise.com/ssh-server-version-history"
},
{
"url": "https://github.com/ronf/asyncssh/tags"
},
{
"url": "https://gitlab.com/libssh/libssh-mirror/-/tags"
},
{
"url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/"
},
{
"url": "https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42"
},
{
"url": "https://www.openssh.com/txt/release-9.6"
},
{
"url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/"
},
{
"url": "https://www.terrapin-attack.com"
},
{
"url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25"
},
{
"url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst"
},
{
"url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway/"
},
{
"url": "https://github.com/warp-tech/russh/releases/tag/v0.40.2"
},
{
"url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0"
},
{
"url": "https://www.openwall.com/lists/oss-security/2023/12/18/2"
},
{
"url": "https://twitter.com/TrueSkrillor/status/1736774389725565005"
},
{
"url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d"
},
{
"url": "https://github.com/paramiko/paramiko/issues/2337"
},
{
"url": "https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg"
},
{
"url": "https://news.ycombinator.com/item?id=38684904"
},
{
"url": "https://news.ycombinator.com/item?id=38685286"
},
{
"name": "[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/18/3"
},
{
"url": "https://github.com/mwiede/jsch/issues/457"
},
{
"url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6"
},
{
"url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.1"
},
{
"url": "https://github.com/advisories/GHSA-45x7-px36-x8w8"
},
{
"url": "https://security-tracker.debian.org/tracker/source-package/libssh2"
},
{
"url": "https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg"
},
{
"url": "https://security-tracker.debian.org/tracker/CVE-2023-48795"
},
{
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210"
},
{
"url": "https://bugs.gentoo.org/920280"
},
{
"url": "https://ubuntu.com/security/CVE-2023-48795"
},
{
"url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/"
},
{
"url": "https://access.redhat.com/security/cve/cve-2023-48795"
},
{
"url": "https://github.com/mwiede/jsch/pull/461"
},
{
"url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6"
},
{
"url": "https://github.com/libssh2/libssh2/pull/1291"
},
{
"url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack"
},
{
"url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5"
},
{
"url": "https://github.com/rapier1/hpn-ssh/releases"
},
{
"url": "https://github.com/proftpd/proftpd/issues/456"
},
{
"url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1"
},
{
"url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15"
},
{
"url": "https://oryx-embedded.com/download/#changelog"
},
{
"url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update"
},
{
"url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22"
},
{
"url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab"
},
{
"url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3"
},
{
"url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC"
},
{
"url": "https://crates.io/crates/thrussh/versions"
},
{
"url": "https://github.com/NixOS/nixpkgs/pull/275249"
},
{
"name": "[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/19/5"
},
{
"url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc"
},
{
"url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/"
},
{
"name": "[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/20/3"
},
{
"url": "http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html"
},
{
"url": "https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES"
},
{
"url": "https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES"
},
{
"url": "https://github.com/apache/mina-sshd/issues/445"
},
{
"url": "https://github.com/hierynomus/sshj/issues/916"
},
{
"url": "https://github.com/janmojzis/tinyssh/issues/81"
},
{
"url": "https://www.openwall.com/lists/oss-security/2023/12/20/3"
},
{
"url": "https://security-tracker.debian.org/tracker/source-package/trilead-ssh2"
},
{
"url": "https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16"
},
{
"name": "FEDORA-2023-0733306be9",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/"
},
{
"name": "DSA-5586",
"tags": [
"vendor-advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5586"
},
{
"url": "https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508"
},
{
"url": "https://www.theregister.com/2023/12/20/terrapin_attack_ssh"
},
{
"url": "https://filezilla-project.org/versions.php"
},
{
"url": "https://nova.app/releases/#v11.8"
},
{
"url": "https://roumenpetrov.info/secsh/#news20231220"
},
{
"url": "https://www.vandyke.com/products/securecrt/history.txt"
},
{
"url": "https://help.panic.com/releasenotes/transmit5/"
},
{
"url": "https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta"
},
{
"url": "https://github.com/PowerShell/Win32-OpenSSH/issues/2189"
},
{
"url": "https://winscp.net/eng/docs/history#6.2.2"
},
{
"url": "https://www.bitvise.com/ssh-client-version-history#933"
},
{
"url": "https://github.com/cyd01/KiTTY/issues/520"
},
{
"name": "DSA-5588",
"tags": [
"vendor-advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5588"
},
{
"url": "https://github.com/ssh-mitm/ssh-mitm/issues/165"
},
{
"url": "https://news.ycombinator.com/item?id=38732005"
},
{
"name": "[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html"
},
{
"name": "GLSA-202312-16",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/202312-16"
},
{
"name": "GLSA-202312-17",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/202312-17"
},
{
"name": "FEDORA-2023-20feb865d8",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/"
},
{
"name": "FEDORA-2023-cb8c606fbb",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/"
},
{
"name": "FEDORA-2023-e77300e4b5",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/"
},
{
"name": "FEDORA-2023-b87ec6cf47",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/"
},
{
"name": "FEDORA-2023-153404713b",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/"
},
{
"url": "https://security.netapp.com/advisory/ntap-20240105-0004/"
},
{
"name": "FEDORA-2024-3bb23c77f3",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/"
},
{
"name": "FEDORA-2023-55800423a8",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/"
},
{
"name": "FEDORA-2024-d946b9ad25",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/"
},
{
"name": "FEDORA-2024-71c2c6526c",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/"
},
{
"name": "FEDORA-2024-39a8c72ea9",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/"
},
{
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002"
},
{
"name": "FEDORA-2024-ae653fb07b",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/"
},
{
"name": "FEDORA-2024-2705241461",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/"
},
{
"name": "FEDORA-2024-fb32950d11",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/"
},
{
"name": "FEDORA-2024-7b08207cdb",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/"
},
{
"name": "FEDORA-2024-06ebb70bdd",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/"
},
{
"name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html"
},
{
"name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html"
},
{
"name": "FEDORA-2024-a53b24023d",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/"
},
{
"name": "FEDORA-2024-3fd1bc9276",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/"
},
{
"url": "https://support.apple.com/kb/HT214084"
},
{
"name": "20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4",
"tags": [
"mailing-list"
],
"url": "http://seclists.org/fulldisclosure/2024/Mar/21"
},
{
"name": "[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html"
},
{
"name": "[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2024/04/17/8"
},
{
"name": "[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2024/03/06/3"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2023-48795",
"datePublished": "2023-12-18T00:00:00.000Z",
"dateReserved": "2023-11-20T00:00:00.000Z",
"dateUpdated": "2026-05-12T11:02:25.905Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-48795",
"date": "2026-06-27",
"epss": "0.93305",
"percentile": "0.99822"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"9.6\", \"matchCriteriaId\": \"5308FBBB-F738-41C5-97A4-E40118E957CD\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"0.80\", \"matchCriteriaId\": \"A9D807DB-9E20-4792-8A9F-4BFFC841BAB7\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:filezilla-project:filezilla_client:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.66.4\", \"matchCriteriaId\": \"42915485-A4DA-48DD-9C15-415D2D39DC52\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"11.1.0\", \"matchCriteriaId\": \"9F37C9AC-185F-403A-A79B-2D5C8E11AFC4\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"387021A0-AF36-463C-A605-32EA7DAC172E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:panic:transmit_5:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"5.10.4\", \"matchCriteriaId\": \"31FFE0AA-FC25-40DE-8EE9-7F4C80ABDE4F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"387021A0-AF36-463C-A605-32EA7DAC172E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:panic:nova:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"11.8\", \"matchCriteriaId\": \"F2FCF7EF-97D7-44CF-AC74-72D856901755\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:roumenpetrov:pkixssh:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"14.4\", \"matchCriteriaId\": \"53CAD263-1C60-43BD-86A2-C8DB15FFB4C6\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.2.2\", \"matchCriteriaId\": \"8FA57F20-C9C1-40A7-B2CD-F3440CCF1D66\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bitvise:ssh_client:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"9.33\", \"matchCriteriaId\": \"6209E375-10C7-4E65-A2E7-455A686717AC\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bitvise:ssh_server:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"9.32\", \"matchCriteriaId\": \"1A05CC3C-19C5-4BAA-ABA2-EE1795E0BE81\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lancom-systems:lcos:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"3.66.4\", \"matchCriteriaId\": \"3A71B523-0778-46C6-A38B-64452E0BB6E7\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lancom-systems:lcos_fx:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1C91308-15E5-40AF-B4D5-3CAD7BC65DDF\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lancom-systems:lcos_lx:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"418940E3-6DD1-4AA6-846A-03E059D0C681\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lancom-systems:lcos_sx:4.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"411BA58A-33B6-44CA-B9D6-7F9042D46961\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lancom-systems:lcos_sx:5.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA17A153-30E4-4731-8706-8F74FCA50993\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lancom-systems:lanconfig:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB736F57-9BE3-4457-A10E-FA88D0932154\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:vandyke:securecrt:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"9.4.3\", \"matchCriteriaId\": \"6EB8D02D-87F3-414D-A3EA-43F594DAAC1B\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"0.10.6\", \"matchCriteriaId\": \"AAB481DA-FBFE-4CC2-9AE7-22025FA07494\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:net-ssh:net-ssh:7.2.0:*:*:*:*:ruby:*:*\", \"matchCriteriaId\": \"3D6FD459-F8E8-4126-8097-D30B4639404A\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ssh2_project:ssh2:*:*:*:*:*:node.js:*:*\", \"versionEndIncluding\": \"1.11.0\", \"matchCriteriaId\": \"69510F52-C699-4E7D-87EF-7000682888F0\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"1.3.8b\", \"matchCriteriaId\": \"9461430B-3709-45B6-8858-2101F5AE4481\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"12.4\", \"matchCriteriaId\": \"B9A01DF3-E20E-4F29-B5CF-DDF717D01E74\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:crates:thrussh:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"0.35.1\", \"matchCriteriaId\": \"D25EB73D-6145-4B7D-8F14-80FD0B458E99\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:tera_term_project:tera_term:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"5.1\", \"matchCriteriaId\": \"77594DEC-B5F7-4911-A13D-FFE91C74BAFA\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oryx-embedded:cyclone_ssh:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.3.4\", \"matchCriteriaId\": \"F8FF7E74-2351-4CD9-B717-FA28893293A1\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"10.6.0\", \"matchCriteriaId\": \"82A93C12-FEB6-4E82-B283-0ED7820D807E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netsarang:xshell_7:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"build__0144\", \"matchCriteriaId\": \"B480AE79-2FA1-4281-9F0D-0DE812B9354D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.4.0\", \"matchCriteriaId\": \"826B6323-06F8-4B96-8771-3FA15A727B08\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"932D137F-528B-4526-9A89-CD59FA1AB0FE\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DCC81071-B46D-4F5D-AC25-B4A4CCC20C73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B3000D2-35DF-4A93-9FC0-1AD3AB8349B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E315FC5C-FF19-43C9-A58A-CF2A5FF13824\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:ceph_storage:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA7EAD12-E398-44AF-9859-F3CA6C63BA6B\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4CFF558-3C47-480D-A2F0-BABF26042943\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openshift_serverless:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"77675CB7-67D7-44E9-B7FF-D224B3341AA5\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C0AAA300-691A-4957-8B69-F6888CC971B1\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openshift_pipelines:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"45937289-2D64-47CB-A750-5B4F0D4664A0\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openshift_developer_tools_and_services:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"97321212-0E07-4CC2-A917-7B5F61AB9A5A\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0E2C021C-A9F0-4EB4-ADED-81D8B57B4563\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openshift_api_for_data_protection:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7BF8EFFB-5686-4F28-A68F-1A8854E098CE\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C877879-B84B-471C-80CF-0656521CA8AB\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"379A5883-F6DF-41F5-9403-8D17F6605737\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:discovery:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5B1D946-5978-4818-BF21-A43D9C1365E1\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:openshift_dev_spaces:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"99B8A88B-0B31-4CFF-AFD7-C9D3DDD5790D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:cert-manager_operator_for_red_hat_openshift:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6D5A7736-A403-4617-8790-18E46CB74DA6\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6E0DE4E1-5D8D-40F3-8AC8-C7F736966158\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"88BF3B2C-B121-483A-AEF2-8082F6DA5310\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:advanced_cluster_security:3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F0FD736A-8730-446A-BA3A-7B608DB62B0E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4C504B6-3902-46E2-82B7-48AEC9CDD48D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"0.17.0\", \"matchCriteriaId\": \"F92E56DF-98DF-4328-B37E-4D5744E4103D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:russh_project:russh:*:*:*:*:*:rust:*:*\", \"versionEndExcluding\": \"0.40.2\", \"matchCriteriaId\": \"AC12508E-3C31-44EA-B4F3-29316BE9B189\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:sftpgo_project:sftpgo:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.5.6\", \"matchCriteriaId\": \"1750028C-698D-4E84-B727-8A155A46ADEB\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"26.2.1\", \"matchCriteriaId\": \"3A9A8E99-7F4A-4B74-B86B-8B3E8B2A8776\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:matez:jsch:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"0.2.15\", \"matchCriteriaId\": \"61119DB3-4336-4D3B-863A-0CCF4146E5C1\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"1.11.1\", \"matchCriteriaId\": \"7BFDD272-3DF0-4E3F-B69A-E7ABF4B18B24\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:asyncssh_project:asyncssh:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.14.2\", \"matchCriteriaId\": \"FAE46983-0ABC-49F7-AC18-A78FAC7E73AA\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2022.83\", \"matchCriteriaId\": \"06BF3368-F232-4E6B-883E-A591EED5C827\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:jadaptive:maverick_synergy_java_ssh_api:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.1.0-snapshot\", \"matchCriteriaId\": \"36531FB6-5682-4BF1-9785-E9D6D1C4207B\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"5.11\", \"matchCriteriaId\": \"514ED687-0D7B-479B-82C5-7EB1A5EEC94C\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:thorntech:sftp_gateway_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.4.6\", \"matchCriteriaId\": \"83B1AF39-C0B9-4031-B19A-BDDD4F337273\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netgate:pfsense_plus:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"23.09.1\", \"matchCriteriaId\": \"2B71B0EF-888E-45E2-A055-F59CDCC1AFC7\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netgate:pfsense_ce:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"2.7.2\", \"matchCriteriaId\": \"8F23CDF7-2881-4B4E-B84F-4E04F4ED8CCF\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.6.0\", \"matchCriteriaId\": \"C1795F7A-203F-400E-B09C-0FAF16D01CFC\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:connectbot:sshlib:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.2.22\", \"matchCriteriaId\": \"0D79DDDD-02F0-4C12-BE7F-1B9DF1722C7A\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:sshd:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"2.11.0\", \"matchCriteriaId\": \"E2D7B0CA-C01F-4296-9425-48299E3889C5\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:sshj:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"0.37.0\", \"matchCriteriaId\": \"1C3EB0B8-9E76-4146-AB02-02E20B91D55C\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:tinyssh:tinyssh:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"20230101\", \"matchCriteriaId\": \"0582468A-149B-429F-978A-2AEDF4BE2606\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:trilead:ssh2:6401:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7E4BAF06-5A79-46D7-8C4F-E670BD6B7C2D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:9bis:kitty:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"0.76.1.13\", \"matchCriteriaId\": \"98321BF9-5E8F-4836-842C-47713B1C2775\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:gentoo:security:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"76BDAFDE-4515-42E6-820F-38AF4A786CF2\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5920923E-0D52-44E5-801D-10B82846ED58\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"14.0\", \"versionEndExcluding\": \"14.4\", \"matchCriteriaId\": \"73160D1F-755B-46D2-969F-DF8E43BB1099\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.\"}, {\"lang\": \"es\", \"value\": \"El protocolo de transporte SSH con ciertas extensiones OpenSSH, que se encuentra en OpenSSH anterior a 9.6 y otros productos, permite a atacantes remotos eludir las comprobaciones de integridad de modo que algunos paquetes se omiten (del mensaje de negociaci\\u00f3n de extensi\\u00f3n) y, en consecuencia, un cliente y un servidor pueden terminar con una conexi\\u00f3n para la cual algunas caracter\\u00edsticas de seguridad han sido degradadas o deshabilitadas, tambi\\u00e9n conocido como un ataque Terrapin. Esto ocurre porque SSH Binary Packet Protocol (BPP), implementado por estas extensiones, maneja mal la fase de protocolo de enlace y el uso de n\\u00fameros de secuencia. Por ejemplo, existe un ataque eficaz contra ChaCha20-Poly1305 (y CBC con Encrypt-then-MAC). La omisi\\u00f3n se produce en chacha20-poly1305@openssh.com y (si se utiliza CBC) en los algoritmos MAC -etm@openssh.com. Esto tambi\\u00e9n afecta a Maverick Synergy Java SSH API anterior a 3.1.0-SNAPSHOT, Dropbear hasta 2022.83, Ssh anterior a 5.1.1 en Erlang/OTP, PuTTY anterior a 0.80 y AsyncSSH anterior a 2.14.2; y podr\\u00eda haber efectos en Bitvise SSH hasta la versi\\u00f3n 9.31, libssh hasta la 0.10.5 y golang.org/x/crypto hasta el 17 de diciembre de 2023.\"}]",
"id": "CVE-2023-48795",
"lastModified": "2024-12-02T14:54:27.177",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"baseScore\": 5.9, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.2, \"impactScore\": 3.6}]}",
"published": "2023-12-18T16:15:10.897",
"references": "[{\"url\": \"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Mar/21\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/18/3\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/19/5\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/20/3\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Mitigation\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/03/06/3\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/17/8\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://access.redhat.com/security/cve/cve-2023-48795\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://bugs.gentoo.org/920280\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=1217950\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://crates.io/crates/thrussh/versions\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://filezilla-project.org/versions.php\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/NixOS/nixpkgs/pull/275249\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/advisories/GHSA-45x7-px36-x8w8\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://github.com/apache/mina-sshd/issues/445\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://github.com/cyd01/KiTTY/issues/520\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/hierynomus/sshj/issues/916\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/janmojzis/tinyssh/issues/81\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/libssh2/libssh2/pull/1291\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mitigation\"]}, {\"url\": \"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\", \"source\": \"cve@mitre.org\", \"tags\": [\"Product\"]}, {\"url\": \"https://github.com/mwiede/jsch/issues/457\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/mwiede/jsch/pull/461\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/openssh/openssh-portable/commits/master\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/paramiko/paramiko/issues/2337\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/proftpd/proftpd/issues/456\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/rapier1/hpn-ssh/releases\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/ronf/asyncssh/tags\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/ssh-mitm/ssh-mitm/issues/165\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/warp-tech/russh/releases/tag/v0.40.2\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://gitlab.com/libssh/libssh-mirror/-/tags\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://help.panic.com/releasenotes/transmit5/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://matt.ucc.asn.au/dropbear/CHANGES\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38684904\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38685286\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38732005\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://nova.app/releases/#v11.8\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://oryx-embedded.com/download/#changelog\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://roumenpetrov.info/secsh/#news20231220\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/CVE-2023-48795\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/libssh2\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-16\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-17\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240105-0004/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214084\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://twitter.com/TrueSkrillor/status/1736774389725565005\", \"source\": \"cve@mitre.org\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://ubuntu.com/security/CVE-2023-48795\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://winscp.net/eng/docs/history#6.2.2\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.bitvise.com/ssh-client-version-history#933\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.bitvise.com/ssh-server-version-history\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5586\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5588\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.netsarang.com/en/xshell-update-history/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.openssh.com/openbsd.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.openssh.com/txt/release-9.6\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/18/2\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/20/3\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Mitigation\"]}, {\"url\": \"https://www.paramiko.org/changelog.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://www.terrapin-attack.com\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\", \"source\": \"cve@mitre.org\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://www.vandyke.com/products/securecrt/history.txt\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\"]}, {\"url\": \"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Mar/21\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/18/3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/19/5\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/20/3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Mitigation\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/03/06/3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/17/8\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://access.redhat.com/security/cve/cve-2023-48795\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://bugs.gentoo.org/920280\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=1217950\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://crates.io/crates/thrussh/versions\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://filezilla-project.org/versions.php\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/NixOS/nixpkgs/pull/275249\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/advisories/GHSA-45x7-px36-x8w8\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://github.com/apache/mina-sshd/issues/445\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://github.com/cyd01/KiTTY/issues/520\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/hierynomus/sshj/issues/916\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/janmojzis/tinyssh/issues/81\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/libssh2/libssh2/pull/1291\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mitigation\"]}, {\"url\": \"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Product\"]}, {\"url\": \"https://github.com/mwiede/jsch/issues/457\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/mwiede/jsch/pull/461\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/openssh/openssh-portable/commits/master\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://github.com/paramiko/paramiko/issues/2337\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/proftpd/proftpd/issues/456\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/rapier1/hpn-ssh/releases\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/ronf/asyncssh/tags\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://github.com/ssh-mitm/ssh-mitm/issues/165\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://github.com/warp-tech/russh/releases/tag/v0.40.2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://gitlab.com/libssh/libssh-mirror/-/tags\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://help.panic.com/releasenotes/transmit5/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://matt.ucc.asn.au/dropbear/CHANGES\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38684904\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38685286\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38732005\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://nova.app/releases/#v11.8\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://oryx-embedded.com/download/#changelog\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://roumenpetrov.info/secsh/#news20231220\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/CVE-2023-48795\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/libssh2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-16\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-17\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240105-0004/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214084\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://twitter.com/TrueSkrillor/status/1736774389725565005\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://ubuntu.com/security/CVE-2023-48795\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://winscp.net/eng/docs/history#6.2.2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.bitvise.com/ssh-client-version-history#933\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.bitvise.com/ssh-server-version-history\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5586\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5588\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.netsarang.com/en/xshell-update-history/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.openssh.com/openbsd.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.openssh.com/txt/release-9.6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/18/2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/20/3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Mitigation\"]}, {\"url\": \"https://www.paramiko.org/changelog.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}, {\"url\": \"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\"]}, {\"url\": \"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://www.terrapin-attack.com\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Press/Media Coverage\"]}, {\"url\": \"https://www.vandyke.com/products/securecrt/history.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Analyzed",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-354\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-48795\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2023-12-18T16:15:10.897\",\"lastModified\":\"2026-06-17T06:34:59.200\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.\"},{\"lang\":\"es\",\"value\":\"El protocolo de transporte SSH con ciertas extensiones OpenSSH, que se encuentra en OpenSSH anterior a 9.6 y otros productos, permite a atacantes remotos eludir las comprobaciones de integridad de modo que algunos paquetes se omiten (del mensaje de negociaci\u00f3n de extensi\u00f3n) y, en consecuencia, un cliente y un servidor pueden terminar con una conexi\u00f3n para la cual algunas caracter\u00edsticas de seguridad han sido degradadas o deshabilitadas, tambi\u00e9n conocido como un ataque Terrapin. Esto ocurre porque SSH Binary Packet Protocol (BPP), implementado por estas extensiones, maneja mal la fase de protocolo de enlace y el uso de n\u00fameros de secuencia. Por ejemplo, existe un ataque eficaz contra ChaCha20-Poly1305 (y CBC con Encrypt-then-MAC). La omisi\u00f3n se produce en chacha20-poly1305@openssh.com y (si se utiliza CBC) en los algoritmos MAC -etm@openssh.com. Esto tambi\u00e9n afecta a Maverick Synergy Java SSH API anterior a 3.1.0-SNAPSHOT, Dropbear hasta 2022.83, Ssh anterior a 5.1.1 en Erlang/OTP, PuTTY anterior a 0.80 y AsyncSSH anterior a 2.14.2; y podr\u00eda haber efectos en Bitvise SSH hasta la versi\u00f3n 9.31, libssh hasta la 0.10.5 y golang.org/x/crypto hasta el 17 de diciembre de 2023.\"}],\"affected\":[{\"source\":\"cve@mitre.org\",\"affectedData\":[{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM APE1808\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.5\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2023-12-22T05:01:05.519910Z\",\"id\":\"CVE-2023-48795\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-354\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-354\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.6\",\"matchCriteriaId\":\"5308FBBB-F738-41C5-97A4-E40118E957CD\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.80\",\"matchCriteriaId\":\"A9D807DB-9E20-4792-8A9F-4BFFC841BAB7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:filezilla-project:filezilla_client:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.66.4\",\"matchCriteriaId\":\"42915485-A4DA-48DD-9C15-415D2D39DC52\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"387021A0-AF36-463C-A605-32EA7DAC172E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:panic:transmit_5:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.10.4\",\"matchCriteriaId\":\"31FFE0AA-FC25-40DE-8EE9-7F4C80ABDE4F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"387021A0-AF36-463C-A605-32EA7DAC172E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:panic:nova:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.8\",\"matchCriteriaId\":\"F2FCF7EF-97D7-44CF-AC74-72D856901755\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:roumenpetrov:pkixssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"14.4\",\"matchCriteriaId\":\"53CAD263-1C60-43BD-86A2-C8DB15FFB4C6\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.2.2\",\"matchCriteriaId\":\"8FA57F20-C9C1-40A7-B2CD-F3440CCF1D66\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bitvise:ssh_client:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.33\",\"matchCriteriaId\":\"6209E375-10C7-4E65-A2E7-455A686717AC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bitvise:ssh_server:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.32\",\"matchCriteriaId\":\"1A05CC3C-19C5-4BAA-ABA2-EE1795E0BE81\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.66.4\",\"matchCriteriaId\":\"3A71B523-0778-46C6-A38B-64452E0BB6E7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos_fx:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1C91308-15E5-40AF-B4D5-3CAD7BC65DDF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos_lx:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"418940E3-6DD1-4AA6-846A-03E059D0C681\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos_sx:4.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"411BA58A-33B6-44CA-B9D6-7F9042D46961\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos_sx:5.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA17A153-30E4-4731-8706-8F74FCA50993\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lanconfig:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB736F57-9BE3-4457-A10E-FA88D0932154\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:vandyke:securecrt:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.4.3\",\"matchCriteriaId\":\"6EB8D02D-87F3-414D-A3EA-43F594DAAC1B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.10.6\",\"matchCriteriaId\":\"AAB481DA-FBFE-4CC2-9AE7-22025FA07494\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:net-ssh:net-ssh:7.2.0:*:*:*:*:ruby:*:*\",\"matchCriteriaId\":\"3D6FD459-F8E8-4126-8097-D30B4639404A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh2_project:ssh2:*:*:*:*:*:node.js:*:*\",\"versionEndIncluding\":\"1.11.0\",\"matchCriteriaId\":\"69510F52-C699-4E7D-87EF-7000682888F0\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.3.8b\",\"matchCriteriaId\":\"9461430B-3709-45B6-8858-2101F5AE4481\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"12.4\",\"matchCriteriaId\":\"B9A01DF3-E20E-4F29-B5CF-DDF717D01E74\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:crates:thrussh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.35.1\",\"matchCriteriaId\":\"D25EB73D-6145-4B7D-8F14-80FD0B458E99\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tera_term_project:tera_term:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1\",\"matchCriteriaId\":\"77594DEC-B5F7-4911-A13D-FFE91C74BAFA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oryx-embedded:cyclone_ssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.3.4\",\"matchCriteriaId\":\"F8FF7E74-2351-4CD9-B717-FA28893293A1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"10.6.0\",\"matchCriteriaId\":\"82A93C12-FEB6-4E82-B283-0ED7820D807E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netsarang:xshell_7:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"build__0144\",\"matchCriteriaId\":\"B480AE79-2FA1-4281-9F0D-0DE812B9354D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.4.0\",\"matchCriteriaId\":\"826B6323-06F8-4B96-8771-3FA15A727B08\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"932D137F-528B-4526-9A89-CD59FA1AB0FE\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCC81071-B46D-4F5D-AC25-B4A4CCC20C73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B3000D2-35DF-4A93-9FC0-1AD3AB8349B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E315FC5C-FF19-43C9-A58A-CF2A5FF13824\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:ceph_storage:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA7EAD12-E398-44AF-9859-F3CA6C63BA6B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_serverless:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77675CB7-67D7-44E9-B7FF-D224B3341AA5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0AAA300-691A-4957-8B69-F6888CC971B1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_pipelines:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45937289-2D64-47CB-A750-5B4F0D4664A0\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_developer_tools_and_services:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97321212-0E07-4CC2-A917-7B5F61AB9A5A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E2C021C-A9F0-4EB4-ADED-81D8B57B4563\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_api_for_data_protection:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BF8EFFB-5686-4F28-A68F-1A8854E098CE\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C877879-B84B-471C-80CF-0656521CA8AB\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"379A5883-F6DF-41F5-9403-8D17F6605737\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:discovery:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5B1D946-5978-4818-BF21-A43D9C1365E1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_dev_spaces:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99B8A88B-0B31-4CFF-AFD7-C9D3DDD5790D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:cert-manager_operator_for_red_hat_openshift:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D5A7736-A403-4617-8790-18E46CB74DA6\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E0DE4E1-5D8D-40F3-8AC8-C7F736966158\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88BF3B2C-B121-483A-AEF2-8082F6DA5310\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:advanced_cluster_security:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0FD736A-8730-446A-BA3A-7B608DB62B0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4C504B6-3902-46E2-82B7-48AEC9CDD48D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.17.0\",\"matchCriteriaId\":\"F92E56DF-98DF-4328-B37E-4D5744E4103D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:russh_project:russh:*:*:*:*:*:rust:*:*\",\"versionEndExcluding\":\"0.40.2\",\"matchCriteriaId\":\"AC12508E-3C31-44EA-B4F3-29316BE9B189\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sftpgo_project:sftpgo:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.5.6\",\"matchCriteriaId\":\"1750028C-698D-4E84-B727-8A155A46ADEB\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"22.3.4.27\",\"matchCriteriaId\":\"B38C0997-A8CC-473C-98CF-641FD21EB411\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"23.0\",\"versionEndExcluding\":\"23.3.4.20\",\"matchCriteriaId\":\"5887F3E2-9214-4FAE-8768-441D770E27C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"24.0\",\"versionEndExcluding\":\"24.3.4.15\",\"matchCriteriaId\":\"8D7CB988-94C4-45BE-AD9D-9C16899A71DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"25.0\",\"versionEndExcluding\":\"25.3.2.8\",\"matchCriteriaId\":\"EB749F4B-99FC-4AE8-BDB3-85B081B52F82\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"26.0\",\"versionEndExcluding\":\"26.2.1\",\"matchCriteriaId\":\"2380909A-BA9B-4A76-82F2-D2D0EF242E57\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:matez:jsch:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.2.15\",\"matchCriteriaId\":\"61119DB3-4336-4D3B-863A-0CCF4146E5C1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.11.1\",\"matchCriteriaId\":\"7BFDD272-3DF0-4E3F-B69A-E7ABF4B18B24\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:asyncssh_project:asyncssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.2\",\"matchCriteriaId\":\"FAE46983-0ABC-49F7-AC18-A78FAC7E73AA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2022.83\",\"matchCriteriaId\":\"06BF3368-F232-4E6B-883E-A591EED5C827\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jadaptive:maverick_synergy_java_ssh_api:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.1.0-snapshot\",\"matchCriteriaId\":\"36531FB6-5682-4BF1-9785-E9D6D1C4207B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.9.1.5\",\"matchCriteriaId\":\"A86A51EA-B501-42F8-91E6-4EA97DED767C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.11.1.7\",\"matchCriteriaId\":\"70989970-E224-4D1C-941E-BBFB2AE7285C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.12\",\"versionEndExcluding\":\"4.13.2.4\",\"matchCriteriaId\":\"E7819CE3-2849-4D15-874B-F6A68EF6D65F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.14\",\"versionEndExcluding\":\"4.15.3.1\",\"matchCriteriaId\":\"F6A4DD8B-06AD-4F13-8F7E-1E2AAF81C119\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.0\",\"versionEndExcluding\":\"5.1.1\",\"matchCriteriaId\":\"D91ED5E1-1D75-4B63-B0A2-B2EB6D4AC685\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:thorntech:sftp_gateway_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.4.6\",\"matchCriteriaId\":\"83B1AF39-C0B9-4031-B19A-BDDD4F337273\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netgate:pfsense_plus:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"23.09.1\",\"matchCriteriaId\":\"2B71B0EF-888E-45E2-A055-F59CDCC1AFC7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netgate:pfsense_ce:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.7.2\",\"matchCriteriaId\":\"8F23CDF7-2881-4B4E-B84F-4E04F4ED8CCF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.6.0\",\"matchCriteriaId\":\"C1795F7A-203F-400E-B09C-0FAF16D01CFC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:connectbot:sshlib:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.2.22\",\"matchCriteriaId\":\"0D79DDDD-02F0-4C12-BE7F-1B9DF1722C7A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:sshd:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.11.0\",\"matchCriteriaId\":\"E2D7B0CA-C01F-4296-9425-48299E3889C5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:sshj:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"0.37.0\",\"matchCriteriaId\":\"1C3EB0B8-9E76-4146-AB02-02E20B91D55C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tinyssh:tinyssh:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20230101\",\"matchCriteriaId\":\"0582468A-149B-429F-978A-2AEDF4BE2606\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trilead:ssh2:6401:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E4BAF06-5A79-46D7-8C4F-E670BD6B7C2D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:9bis:kitty:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"0.76.1.13\",\"matchCriteriaId\":\"98321BF9-5E8F-4836-842C-47713B1C2775\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gentoo:security:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76BDAFDE-4515-42E6-820F-38AF4A786CF2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5920923E-0D52-44E5-801D-10B82846ED58\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"14.0\",\"versionEndExcluding\":\"14.4\",\"matchCriteriaId\":\"73160D1F-755B-46D2-969F-DF8E43BB1099\"}]}]}],\"references\":[{\"url\":\"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Mar/21\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/18/3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/19/5\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/20/3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Mitigation\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/03/06/3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/04/17/8\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://access.redhat.com/security/cve/cve-2023-48795\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://bugs.gentoo.org/920280\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://bugzilla.suse.com/show_bug.cgi?id=1217950\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://crates.io/crates/thrussh/versions\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://filezilla-project.org/versions.php\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/NixOS/nixpkgs/pull/275249\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/advisories/GHSA-45x7-px36-x8w8\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/apache/mina-sshd/issues/445\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/cyd01/KiTTY/issues/520\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/hierynomus/sshj/issues/916\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/janmojzis/tinyssh/issues/81\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/libssh2/libssh2/pull/1291\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mitigation\"]},{\"url\":\"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\",\"source\":\"cve@mitre.org\",\"tags\":[\"Product\"]},{\"url\":\"https://github.com/mwiede/jsch/issues/457\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/mwiede/jsch/pull/461\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssh/openssh-portable/commits/master\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/paramiko/paramiko/issues/2337\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/issues/456\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/rapier1/hpn-ssh/releases\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ronf/asyncssh/tags\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ssh-mitm/ssh-mitm/issues/165\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/warp-tech/russh/releases/tag/v0.40.2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://gitlab.com/libssh/libssh-mirror/-/tags\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://help.panic.com/releasenotes/transmit5/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://matt.ucc.asn.au/dropbear/CHANGES\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://news.ycombinator.com/item?id=38684904\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://news.ycombinator.com/item?id=38685286\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://news.ycombinator.com/item?id=38732005\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://nova.app/releases/#v11.8\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://oryx-embedded.com/download/#changelog\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://roumenpetrov.info/secsh/#news20231220\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://security-tracker.debian.org/tracker/CVE-2023-48795\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/libssh2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-16\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-17\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240105-0004/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214084\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://twitter.com/TrueSkrillor/status/1736774389725565005\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://ubuntu.com/security/CVE-2023-48795\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://winscp.net/eng/docs/history#6.2.2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.bitvise.com/ssh-client-version-history#933\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.bitvise.com/ssh-server-version-history\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5586\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5588\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.netsarang.com/en/xshell-update-history/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openssh.com/openbsd.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openssh.com/txt/release-9.6\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openwall.com/lists/oss-security/2023/12/18/2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://www.openwall.com/lists/oss-security/2023/12/20/3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Mitigation\"]},{\"url\":\"https://www.paramiko.org/changelog.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://www.terrapin-attack.com\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://www.vandyke.com/products/securecrt/history.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Mar/21\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/18/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/19/5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/20/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Mitigation\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/03/06/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/04/17/8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://access.redhat.com/security/cve/cve-2023-48795\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://bugs.gentoo.org/920280\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://bugzilla.suse.com/show_bug.cgi?id=1217950\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://crates.io/crates/thrussh/versions\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://filezilla-project.org/versions.php\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/NixOS/nixpkgs/pull/275249\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/advisories/GHSA-45x7-px36-x8w8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/apache/mina-sshd/issues/445\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/cyd01/KiTTY/issues/520\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/hierynomus/sshj/issues/916\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/janmojzis/tinyssh/issues/81\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/libssh2/libssh2/pull/1291\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\"]},{\"url\":\"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Product\"]},{\"url\":\"https://github.com/mwiede/jsch/issues/457\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/mwiede/jsch/pull/461\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssh/openssh-portable/commits/master\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/paramiko/paramiko/issues/2337\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/issues/456\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/rapier1/hpn-ssh/releases\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ronf/asyncssh/tags\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ssh-mitm/ssh-mitm/issues/165\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/warp-tech/russh/releases/tag/v0.40.2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://gitlab.com/libssh/libssh-mirror/-/tags\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://help.panic.com/releasenotes/transmit5/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://matt.ucc.asn.au/dropbear/CHANGES\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://news.ycombinator.com/item?id=38684904\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://news.ycombinator.com/item?id=38685286\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://news.ycombinator.com/item?id=38732005\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://nova.app/releases/#v11.8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://oryx-embedded.com/download/#changelog\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://roumenpetrov.info/secsh/#news20231220\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://security-tracker.debian.org/tracker/CVE-2023-48795\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/libssh2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-17\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240105-0004/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214084\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://twitter.com/TrueSkrillor/status/1736774389725565005\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://ubuntu.com/security/CVE-2023-48795\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://winscp.net/eng/docs/history#6.2.2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.bitvise.com/ssh-client-version-history#933\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.bitvise.com/ssh-server-version-history\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5586\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5588\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.netsarang.com/en/xshell-update-history/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openssh.com/openbsd.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openssh.com/txt/release-9.6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openwall.com/lists/oss-security/2023/12/18/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://www.openwall.com/lists/oss-security/2023/12/20/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Mitigation\"]},{\"url\":\"https://www.paramiko.org/changelog.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://www.terrapin-attack.com\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://www.vandyke.com/products/securecrt/history.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-082556.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-364175.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-769027.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-794697.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-915275.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit\"}, {\"url\": \"https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability\"}, {\"url\": \"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://matt.ucc.asn.au/dropbear/CHANGES\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.netsarang.com/en/xshell-update-history/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.paramiko.org/changelog.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openssh.com/openbsd.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/openssh/openssh-portable/commits/master\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.bitvise.com/ssh-server-version-history\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/ronf/asyncssh/tags\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://gitlab.com/libssh/libssh-mirror/-/tags\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openssh.com/txt/release-9.6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.terrapin-attack.com\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/warp-tech/russh/releases/tag/v0.40.2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/18/2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://twitter.com/TrueSkrillor/status/1736774389725565005\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/paramiko/paramiko/issues/2337\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38684904\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38685286\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/18/3\", \"name\": \"[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://github.com/mwiede/jsch/issues/457\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/advisories/GHSA-45x7-px36-x8w8\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/libssh2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/CVE-2023-48795\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=1217950\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bugs.gentoo.org/920280\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://ubuntu.com/security/CVE-2023-48795\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://access.redhat.com/security/cve/cve-2023-48795\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/mwiede/jsch/pull/461\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/libssh2/libssh2/pull/1291\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/rapier1/hpn-ssh/releases\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/proftpd/proftpd/issues/456\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://oryx-embedded.com/download/#changelog\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://crates.io/crates/thrussh/versions\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/NixOS/nixpkgs/pull/275249\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/19/5\", \"name\": \"[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/20/3\", \"name\": \"[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/apache/mina-sshd/issues/445\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/hierynomus/sshj/issues/916\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/janmojzis/tinyssh/issues/81\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/20/3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\", \"name\": \"FEDORA-2023-0733306be9\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5586\", \"name\": \"DSA-5586\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://filezilla-project.org/versions.php\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://nova.app/releases/#v11.8\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://roumenpetrov.info/secsh/#news20231220\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.vandyke.com/products/securecrt/history.txt\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://help.panic.com/releasenotes/transmit5/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://winscp.net/eng/docs/history#6.2.2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.bitvise.com/ssh-client-version-history#933\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/cyd01/KiTTY/issues/520\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5588\", \"name\": \"DSA-5588\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://github.com/ssh-mitm/ssh-mitm/issues/165\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38732005\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\", \"name\": \"[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-16\", \"name\": \"GLSA-202312-16\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-17\", \"name\": \"GLSA-202312-17\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\", \"name\": \"FEDORA-2023-20feb865d8\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\", \"name\": \"FEDORA-2023-cb8c606fbb\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\", \"name\": \"FEDORA-2023-e77300e4b5\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\", \"name\": \"FEDORA-2023-b87ec6cf47\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\", \"name\": \"FEDORA-2023-153404713b\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240105-0004/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\", \"name\": \"FEDORA-2024-3bb23c77f3\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\", \"name\": \"FEDORA-2023-55800423a8\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\", \"name\": \"FEDORA-2024-d946b9ad25\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\", \"name\": \"FEDORA-2024-71c2c6526c\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\", \"name\": \"FEDORA-2024-39a8c72ea9\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\", \"name\": \"FEDORA-2024-ae653fb07b\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\", \"name\": \"FEDORA-2024-2705241461\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\", \"name\": \"FEDORA-2024-fb32950d11\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\", \"name\": \"FEDORA-2024-7b08207cdb\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\", \"name\": \"FEDORA-2024-06ebb70bdd\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\", \"name\": \"[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\", \"name\": \"[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\", \"name\": \"FEDORA-2024-a53b24023d\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\", \"name\": \"FEDORA-2024-3fd1bc9276\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT214084\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Mar/21\", \"name\": \"20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\", \"name\": \"[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/17/8\", \"name\": \"[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/03/06/3\", \"name\": \"[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-04T22:05:21.417Z\"}}, {\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM APE1808\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-794697.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-364175.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-915275.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-769027.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-082556.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-05-12T11:02:25.905Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-48795\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2023-12-22T05:01:05.519910Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-354\", \"description\": \"CWE-354 Improper Validation of Integrity Check Value\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-08-27T20:45:13.765Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"references\": [{\"url\": \"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\"}, {\"url\": \"https://matt.ucc.asn.au/dropbear/CHANGES\"}, {\"url\": \"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\"}, {\"url\": \"https://www.netsarang.com/en/xshell-update-history/\"}, {\"url\": \"https://www.paramiko.org/changelog.html\"}, {\"url\": \"https://www.openssh.com/openbsd.html\"}, {\"url\": \"https://github.com/openssh/openssh-portable/commits/master\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\"}, {\"url\": \"https://www.bitvise.com/ssh-server-version-history\"}, {\"url\": \"https://github.com/ronf/asyncssh/tags\"}, {\"url\": \"https://gitlab.com/libssh/libssh-mirror/-/tags\"}, {\"url\": \"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\"}, {\"url\": \"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\"}, {\"url\": \"https://www.openssh.com/txt/release-9.6\"}, {\"url\": \"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\"}, {\"url\": \"https://www.terrapin-attack.com\"}, {\"url\": \"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\"}, {\"url\": \"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\"}, {\"url\": \"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\"}, {\"url\": \"https://github.com/warp-tech/russh/releases/tag/v0.40.2\"}, {\"url\": \"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\"}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/18/2\"}, {\"url\": \"https://twitter.com/TrueSkrillor/status/1736774389725565005\"}, {\"url\": \"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\"}, {\"url\": \"https://github.com/paramiko/paramiko/issues/2337\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\"}, {\"url\": \"https://news.ycombinator.com/item?id=38684904\"}, {\"url\": \"https://news.ycombinator.com/item?id=38685286\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/18/3\", \"name\": \"[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://github.com/mwiede/jsch/issues/457\"}, {\"url\": \"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\"}, {\"url\": \"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\"}, {\"url\": \"https://github.com/advisories/GHSA-45x7-px36-x8w8\"}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/libssh2\"}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\"}, {\"url\": \"https://security-tracker.debian.org/tracker/CVE-2023-48795\"}, {\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=1217950\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\"}, {\"url\": \"https://bugs.gentoo.org/920280\"}, {\"url\": \"https://ubuntu.com/security/CVE-2023-48795\"}, {\"url\": \"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\"}, {\"url\": \"https://access.redhat.com/security/cve/cve-2023-48795\"}, {\"url\": \"https://github.com/mwiede/jsch/pull/461\"}, {\"url\": \"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\"}, {\"url\": \"https://github.com/libssh2/libssh2/pull/1291\"}, {\"url\": \"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\"}, {\"url\": \"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\"}, {\"url\": \"https://github.com/rapier1/hpn-ssh/releases\"}, {\"url\": \"https://github.com/proftpd/proftpd/issues/456\"}, {\"url\": \"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\"}, {\"url\": \"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\"}, {\"url\": \"https://oryx-embedded.com/download/#changelog\"}, {\"url\": \"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\"}, {\"url\": \"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\"}, {\"url\": \"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\"}, {\"url\": \"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\"}, {\"url\": \"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\"}, {\"url\": \"https://crates.io/crates/thrussh/versions\"}, {\"url\": \"https://github.com/NixOS/nixpkgs/pull/275249\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/19/5\", \"name\": \"[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\"}, {\"url\": \"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/20/3\", \"name\": \"[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\"]}, {\"url\": \"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\"}, {\"url\": \"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\"}, {\"url\": \"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\"}, {\"url\": \"https://github.com/apache/mina-sshd/issues/445\"}, {\"url\": \"https://github.com/hierynomus/sshj/issues/916\"}, {\"url\": \"https://github.com/janmojzis/tinyssh/issues/81\"}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/20/3\"}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\"}, {\"url\": \"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\", \"name\": \"FEDORA-2023-0733306be9\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5586\", \"name\": \"DSA-5586\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\"}, {\"url\": \"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\"}, {\"url\": \"https://filezilla-project.org/versions.php\"}, {\"url\": \"https://nova.app/releases/#v11.8\"}, {\"url\": \"https://roumenpetrov.info/secsh/#news20231220\"}, {\"url\": \"https://www.vandyke.com/products/securecrt/history.txt\"}, {\"url\": \"https://help.panic.com/releasenotes/transmit5/\"}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\"}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\"}, {\"url\": \"https://winscp.net/eng/docs/history#6.2.2\"}, {\"url\": \"https://www.bitvise.com/ssh-client-version-history#933\"}, {\"url\": \"https://github.com/cyd01/KiTTY/issues/520\"}, {\"url\": \"https://www.debian.org/security/2023/dsa-5588\", \"name\": \"DSA-5588\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://github.com/ssh-mitm/ssh-mitm/issues/165\"}, {\"url\": \"https://news.ycombinator.com/item?id=38732005\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\", \"name\": \"[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-16\", \"name\": \"GLSA-202312-16\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-17\", \"name\": \"GLSA-202312-17\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\", \"name\": \"FEDORA-2023-20feb865d8\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\", \"name\": \"FEDORA-2023-cb8c606fbb\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\", \"name\": \"FEDORA-2023-e77300e4b5\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\", \"name\": \"FEDORA-2023-b87ec6cf47\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\", \"name\": \"FEDORA-2023-153404713b\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240105-0004/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\", \"name\": \"FEDORA-2024-3bb23c77f3\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\", \"name\": \"FEDORA-2023-55800423a8\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\", \"name\": \"FEDORA-2024-d946b9ad25\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\", \"name\": \"FEDORA-2024-71c2c6526c\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\", \"name\": \"FEDORA-2024-39a8c72ea9\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\", \"name\": \"FEDORA-2024-ae653fb07b\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\", \"name\": \"FEDORA-2024-2705241461\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\", \"name\": \"FEDORA-2024-fb32950d11\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\", \"name\": \"FEDORA-2024-7b08207cdb\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\", \"name\": \"FEDORA-2024-06ebb70bdd\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\", \"name\": \"[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\", \"name\": \"[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\", \"name\": \"FEDORA-2024-a53b24023d\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\", \"name\": \"FEDORA-2024-3fd1bc9276\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214084\"}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Mar/21\", \"name\": \"20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\", \"name\": \"[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/17/8\", \"name\": \"[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client\", \"tags\": [\"mailing-list\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/03/06/3\", \"name\": \"[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins\", \"tags\": [\"mailing-list\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2024-05-01T18:06:23.972Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-48795\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-12T11:02:25.905Z\", \"dateReserved\": \"2023-11-20T00:00:00.000Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2023-12-18T00:00:00.000Z\", \"assignerShortName\": \"mitre\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
SUSE-SU-2024:0035-1
Vulnerability from csaf_suse - Published: 2024-01-05 09:33 - Updated: 2024-01-05 09:33Summary
Security update for python-paramiko
Severity
Important
Notes
Title of the patch: Security update for python-paramiko
Description of the patch: This update for python-paramiko fixes the following issues:
- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#bsc#1218168).
- Update to 3.4.0.
Patchnames: SUSE-2024-35,SUSE-SLE-Module-Python3-15-SP5-2024-35,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-35,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-35,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-35,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-35,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-35,openSUSE-SLE-15.5-2024-35
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-paramiko-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Python 3 15 SP5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Python 3 15 SP5:python311-paramiko-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:python-paramiko-doc-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:python311-paramiko-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:python311-paramiko-3.4.0-150400.13.6.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for python-paramiko",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for python-paramiko fixes the following issues:\n\n- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#bsc#1218168).\n\n- Update to 3.4.0.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-35,SUSE-SLE-Module-Python3-15-SP5-2024-35,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-35,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-35,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-35,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-35,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-35,openSUSE-SLE-15.5-2024-35",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0035-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0035-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240035-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0035-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017588.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218168",
"url": "https://bugzilla.suse.com/1218168"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for python-paramiko",
"tracking": {
"current_release_date": "2024-01-05T09:33:42Z",
"generator": {
"date": "2024-01-05T09:33:42Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0035-1",
"initial_release_date": "2024-01-05T09:33:42Z",
"revision_history": [
{
"date": "2024-01-05T09:33:42Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"product": {
"name": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"product_id": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch"
}
},
{
"category": "product_version",
"name": "python311-paramiko-3.4.0-150400.13.6.1.noarch",
"product": {
"name": "python311-paramiko-3.4.0-150400.13.6.1.noarch",
"product_id": "python311-paramiko-3.4.0-150400.13.6.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Python 3 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Python 3 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Python 3 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-python3:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise Module for Python 3 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Python 3 15 SP5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-paramiko-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise Module for Python 3 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Python 3 15 SP5:python311-paramiko-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python311-paramiko-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 3 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-paramiko-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-paramiko-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python311-paramiko-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-paramiko-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python311-paramiko-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-paramiko-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python311-paramiko-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python-paramiko-doc-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-paramiko-3.4.0-150400.13.6.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python311-paramiko-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python311-paramiko-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-paramiko-3.4.0-150400.13.6.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:python311-paramiko-3.4.0-150400.13.6.1.noarch"
},
"product_reference": "python311-paramiko-3.4.0-150400.13.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Module for Python 3 15 SP5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Module for Python 3 15 SP5:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"openSUSE Leap 15.5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"openSUSE Leap 15.5:python311-paramiko-3.4.0-150400.13.6.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Module for Python 3 15 SP5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Module for Python 3 15 SP5:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"openSUSE Leap 15.5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"openSUSE Leap 15.5:python311-paramiko-3.4.0-150400.13.6.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Module for Python 3 15 SP5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Module for Python 3 15 SP5:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:python311-paramiko-3.4.0-150400.13.6.1.noarch",
"openSUSE Leap 15.5:python-paramiko-doc-3.4.0-150400.13.6.1.noarch",
"openSUSE Leap 15.5:python311-paramiko-3.4.0-150400.13.6.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-01-05T09:33:42Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0140-1
Vulnerability from csaf_suse - Published: 2024-01-18 10:35 - Updated: 2024-01-18 10:35Summary
Security update for libssh
Severity
Important
Notes
Title of the patch: Security update for libssh
Description of the patch: This update for libssh fixes the following issues:
Security fixes:
- CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209)
- CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126)
- CVE-2023-6918: Fixed missing checks for return values of MD functions (bsc#1218186)
- CVE-2023-1667: Fixed NULL dereference during rekeying with algorithm guessing (bsc#1211188)
- CVE-2023-2283: Fixed possible authorization bypass in pki_verify_data_signature under low-memory conditions (bsc#1211190)
Other fixes:
- Update to version 0.9.8
- Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
- Fix several memory leaks in GSSAPI handling code
Patchnames: SUSE-2024-140,SUSE-SLE-Micro-5.3-2024-140,SUSE-SLE-Micro-5.4-2024-140,SUSE-SLE-Micro-5.5-2024-140,SUSE-SLE-Module-Basesystem-15-SP5-2024-140,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-140,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-140,SUSE-SLE-Product-RT-15-SP4-2024-140,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-140,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-140,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-140,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-140,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-140,openSUSE-Leap-Micro-5.3-2024-140,openSUSE-Leap-Micro-5.4-2024-140,openSUSE-SLE-15.5-2024-140
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.3 (Medium)
Affected products
Recommended
106 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
106 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
106 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.8 (Medium)
Affected products
Recommended
106 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
106 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libssh fixes the following issues:\n\nSecurity fixes:\n\n - CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209)\n - CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126)\n - CVE-2023-6918: Fixed missing checks for return values of MD functions (bsc#1218186)\n - CVE-2023-1667: Fixed NULL dereference during rekeying with algorithm guessing (bsc#1211188)\n - CVE-2023-2283: Fixed possible authorization bypass in pki_verify_data_signature under low-memory conditions (bsc#1211190)\n\nOther fixes:\n\n- Update to version 0.9.8\n - Allow @ in usernames when parsing from URI composes\n\n- Update to version 0.9.7\n - Fix several memory leaks in GSSAPI handling code\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-140,SUSE-SLE-Micro-5.3-2024-140,SUSE-SLE-Micro-5.4-2024-140,SUSE-SLE-Micro-5.5-2024-140,SUSE-SLE-Module-Basesystem-15-SP5-2024-140,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-140,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-140,SUSE-SLE-Product-RT-15-SP4-2024-140,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-140,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-140,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-140,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-140,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-140,openSUSE-Leap-Micro-5.3-2024-140,openSUSE-Leap-Micro-5.4-2024-140,openSUSE-SLE-15.5-2024-140",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0140-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0140-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240140-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0140-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017678.html"
},
{
"category": "self",
"summary": "SUSE Bug 1211188",
"url": "https://bugzilla.suse.com/1211188"
},
{
"category": "self",
"summary": "SUSE Bug 1211190",
"url": "https://bugzilla.suse.com/1211190"
},
{
"category": "self",
"summary": "SUSE Bug 1218126",
"url": "https://bugzilla.suse.com/1218126"
},
{
"category": "self",
"summary": "SUSE Bug 1218186",
"url": "https://bugzilla.suse.com/1218186"
},
{
"category": "self",
"summary": "SUSE Bug 1218209",
"url": "https://bugzilla.suse.com/1218209"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1667 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2283 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6004 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6918 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6918/"
}
],
"title": "Security update for libssh",
"tracking": {
"current_release_date": "2024-01-18T10:35:00Z",
"generator": {
"date": "2024-01-18T10:35:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0140-1",
"initial_release_date": "2024-01-18T10:35:00Z",
"revision_history": [
{
"date": "2024-01-18T10:35:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"product": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"product_id": "libssh-config-0.9.8-150400.3.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150400.3.3.1.aarch64",
"product": {
"name": "libssh-devel-0.9.8-150400.3.3.1.aarch64",
"product_id": "libssh-devel-0.9.8-150400.3.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150400.3.3.1.aarch64",
"product": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64",
"product_id": "libssh4-0.9.8-150400.3.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh4-64bit-0.9.8-150400.3.3.1.aarch64_ilp32",
"product": {
"name": "libssh4-64bit-0.9.8-150400.3.3.1.aarch64_ilp32",
"product_id": "libssh4-64bit-0.9.8-150400.3.3.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150400.3.3.1.i586",
"product": {
"name": "libssh-config-0.9.8-150400.3.3.1.i586",
"product_id": "libssh-config-0.9.8-150400.3.3.1.i586"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150400.3.3.1.i586",
"product": {
"name": "libssh-devel-0.9.8-150400.3.3.1.i586",
"product_id": "libssh-devel-0.9.8-150400.3.3.1.i586"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150400.3.3.1.i586",
"product": {
"name": "libssh4-0.9.8-150400.3.3.1.i586",
"product_id": "libssh4-0.9.8-150400.3.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150400.3.3.1.ppc64le",
"product": {
"name": "libssh-config-0.9.8-150400.3.3.1.ppc64le",
"product_id": "libssh-config-0.9.8-150400.3.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"product": {
"name": "libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"product_id": "libssh-devel-0.9.8-150400.3.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150400.3.3.1.ppc64le",
"product": {
"name": "libssh4-0.9.8-150400.3.3.1.ppc64le",
"product_id": "libssh4-0.9.8-150400.3.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150400.3.3.1.s390x",
"product": {
"name": "libssh-config-0.9.8-150400.3.3.1.s390x",
"product_id": "libssh-config-0.9.8-150400.3.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150400.3.3.1.s390x",
"product": {
"name": "libssh-devel-0.9.8-150400.3.3.1.s390x",
"product_id": "libssh-devel-0.9.8-150400.3.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150400.3.3.1.s390x",
"product": {
"name": "libssh4-0.9.8-150400.3.3.1.s390x",
"product_id": "libssh4-0.9.8-150400.3.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"product": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"product_id": "libssh-config-0.9.8-150400.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"product": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"product_id": "libssh-devel-0.9.8-150400.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150400.3.3.1.x86_64",
"product": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64",
"product_id": "libssh4-0.9.8-150400.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"product": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"product_id": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.3",
"product": {
"name": "SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.4",
"product": {
"name": "SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.5",
"product": {
"name": "SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Real Time 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Real Time 15 SP4",
"product_id": "SUSE Linux Enterprise Real Time 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_rt:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 4.3",
"product": {
"name": "SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server 4.3",
"product": {
"name": "SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:4.3"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.3",
"product": {
"name": "openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.4",
"product": {
"name": "openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Real Time 15 SP4",
"product_id": "SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Real Time 15 SP4",
"product_id": "SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Real Time 15 SP4",
"product_id": "SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Real Time 15 SP4",
"product_id": "SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.s390x as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.s390x as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150400.3.3.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150400.3.3.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150400.3.3.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-1667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1667"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1667",
"url": "https://www.suse.com/security/cve/CVE-2023-1667"
},
{
"category": "external",
"summary": "SUSE Bug 1211188 for CVE-2023-1667",
"url": "https://bugzilla.suse.com/1211188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-01-18T10:35:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-1667"
},
{
"cve": "CVE-2023-2283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2283"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2283",
"url": "https://www.suse.com/security/cve/CVE-2023-2283"
},
{
"category": "external",
"summary": "SUSE Bug 1211190 for CVE-2023-2283",
"url": "https://bugzilla.suse.com/1211190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-01-18T10:35:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-2283"
},
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-01-18T10:35:00Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
},
{
"cve": "CVE-2023-6004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6004"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6004",
"url": "https://www.suse.com/security/cve/CVE-2023-6004"
},
{
"category": "external",
"summary": "SUSE Bug 1218209 for CVE-2023-6004",
"url": "https://bugzilla.suse.com/1218209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-01-18T10:35:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-6004"
},
{
"cve": "CVE-2023-6918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6918"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6918",
"url": "https://www.suse.com/security/cve/CVE-2023-6918"
},
{
"category": "external",
"summary": "SUSE Bug 1218186 for CVE-2023-6918",
"url": "https://bugzilla.suse.com/1218186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Real Time 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Proxy 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.ppc64le",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.s390x",
"SUSE Manager Server 4.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"SUSE Manager Server 4.3:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh-devel-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.ppc64le",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap 15.5:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap 15.5:libssh4-32bit-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.3:libssh4-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh-config-0.9.8-150400.3.3.1.x86_64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.aarch64",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.s390x",
"openSUSE Leap Micro 5.4:libssh4-0.9.8-150400.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-01-18T10:35:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-6918"
}
]
}
SUSE-SU-2024:0210-1
Vulnerability from csaf_suse - Published: 2024-01-24 13:04 - Updated: 2024-01-24 13:04Summary
Security update for erlang
Severity
Important
Notes
Title of the patch: Security update for erlang
Description of the patch: This update for erlang fixes the following issues:
- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218192)
Patchnames: SUSE-2024-210,SUSE-SLE-Module-Server-Applications-15-SP5-2024-210,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-210,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-210,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-210,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-210,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-210,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-210,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-210,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-210,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-210,SUSE-Storage-7.1-2024-210,openSUSE-SLE-15.5-2024-210
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
136 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for erlang",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for erlang fixes the following issues:\n\n- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218192)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-210,SUSE-SLE-Module-Server-Applications-15-SP5-2024-210,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-210,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-210,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-210,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-210,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-210,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-210,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-210,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-210,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-210,SUSE-Storage-7.1-2024-210,openSUSE-SLE-15.5-2024-210",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0210-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0210-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240210-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0210-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017749.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218192",
"url": "https://bugzilla.suse.com/1218192"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for erlang",
"tracking": {
"current_release_date": "2024-01-24T13:04:45Z",
"generator": {
"date": "2024-01-24T13:04:45Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0210-1",
"initial_release_date": "2024-01-24T13:04:45Z",
"revision_history": [
{
"date": "2024-01-24T13:04:45Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-debugger-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-diameter-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-doc-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-doc-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-doc-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-et-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-et-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-et-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-et-src-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-observer-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-observer-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-observer-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-reltool-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-src-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-src-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-src-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-wx-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-wx-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-wx-23.3.4.19-150300.3.14.1.aarch64"
}
},
{
"category": "product_version",
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64",
"product": {
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64",
"product_id": "erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-debugger-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-debugger-src-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-dialyzer-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-diameter-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-diameter-src-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-doc-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-doc-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-doc-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-epmd-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-et-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-et-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-et-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-et-src-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-jinterface-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-observer-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-observer-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-observer-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-observer-src-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-reltool-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-reltool-src-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-src-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-src-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-src-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-wx-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-wx-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-wx-23.3.4.19-150300.3.14.1.i586"
}
},
{
"category": "product_version",
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.i586",
"product": {
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.i586",
"product_id": "erlang-wx-src-23.3.4.19-150300.3.14.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-doc-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-doc-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-doc-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-et-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-et-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-et-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-observer-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-observer-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-observer-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-src-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-src-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-src-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-wx-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-wx-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-wx-23.3.4.19-150300.3.14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le",
"product": {
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le",
"product_id": "erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-debugger-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-diameter-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-doc-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-doc-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-doc-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-et-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-et-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-et-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-et-src-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-jinterface-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-observer-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-observer-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-observer-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-observer-src-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-reltool-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-src-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-src-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-src-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-wx-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-wx-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-wx-23.3.4.19-150300.3.14.1.s390x"
}
},
{
"category": "product_version",
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.s390x",
"product": {
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.s390x",
"product_id": "erlang-wx-src-23.3.4.19-150300.3.14.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-debugger-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-diameter-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-doc-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-doc-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-doc-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-et-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-et-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-et-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-et-src-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-observer-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-observer-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-observer-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-reltool-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-src-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-src-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-src-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-wx-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-wx-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-wx-23.3.4.19-150300.3.14.1.x86_64"
}
},
{
"category": "product_version",
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64",
"product": {
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64",
"product_id": "erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-server-applications:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 4.3",
"product": {
"name": "SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server 4.3",
"product": {
"name": "SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-debugger-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-debugger-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-debugger-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-diameter-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-diameter-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-diameter-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-doc-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-doc-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-doc-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-doc-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-doc-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-doc-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-doc-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-doc-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-et-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-et-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-et-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-et-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-et-src-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-et-src-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-et-src-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-et-src-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-jinterface-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-observer-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-observer-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-observer-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-observer-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-observer-src-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-reltool-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-reltool-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-reltool-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-src-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-src-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-src-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-src-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-src-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-src-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-src-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-src-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-wx-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-wx-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-wx-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-wx-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64"
},
"product_reference": "erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le"
},
"product_reference": "erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.s390x"
},
"product_reference": "erlang-wx-src-23.3.4.19-150300.3.14.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64"
},
"product_reference": "erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Proxy 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Proxy 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Proxy 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Proxy 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Enterprise Storage 7.1:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Enterprise Storage 7.1:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Proxy 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Proxy 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.s390x",
"SUSE Manager Server 4.3:erlang-23.3.4.19-150300.3.14.1.x86_64",
"SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"SUSE Manager Server 4.3:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-debugger-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-debugger-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-dialyzer-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-dialyzer-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-diameter-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-diameter-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-doc-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-epmd-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-et-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-et-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-jinterface-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-jinterface-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-observer-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-observer-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-reltool-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-reltool-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-src-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-wx-23.3.4.19-150300.3.14.1.x86_64",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.aarch64",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.ppc64le",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.s390x",
"openSUSE Leap 15.5:erlang-wx-src-23.3.4.19-150300.3.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-01-24T13:04:45Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0224-1
Vulnerability from csaf_suse - Published: 2024-01-25 08:27 - Updated: 2024-01-25 08:27Summary
Security update for apache-parent, apache-sshd
Severity
Important
Notes
Title of the patch: Security update for apache-parent, apache-sshd
Description of the patch: This update for apache-parent, apache-sshd fixes the following issues:
apache-parent was updated from version 28 to 31:
- Version 31:
* New Features:
+ Added maven-checkstyle-plugin to pluginManagement
* Improvements:
+ Set minimalMavenBuildVersion to 3.6.3 - the minimum
used by plugins
+ Using an SPDX identifier as the license name is
recommended by Maven
+ Use properties to define the versions of plugins
* Bugs fixed:
+ Updated documentation for previous changes
apache-sshd was updated from version 2.7.0 to 2.12.0:
- Security issues fixed:
* CVE-2023-48795: Implemented OpenSSH 'strict key exchange' protocol in apache-sshd version 2.12.0 (bsc#1218189)
* CVE-2022-45047: Java unsafe deserialization vulnerability fixed in apache-sshd version 2.9.2 (bsc#1205463)
- Other changes in version 2.12.0:
* Bugs fixed:
+ SCP client fails silently when error signalled due to missing file or lacking permissions
+ Ignore unknown key types from agent or in OpenSSH host keys extension
* New Features:
+ Support GIT protocol-v2
- Other changes in version 2.11.0:
* Bugs fixed:
+ Added configurable timeout(s) to DefaultSftpClient
+ Compare file keys in ModifiableFileWatcher.
+ Fixed channel pool in SftpFileSystem.
+ Use correct default OpenOptions in SftpFileSystemProvider.newFileChannel().
+ Use correct lock modes for SFTP FileChannel.lock().
+ ScpClient: support issuing commands to a server that uses a non-UTF-8 locale.
+ SftpInputStreamAsync: fix reporting EOF on zero-length reads.
+ Work-around a bug in WS_FTP <= 12.9 SFTP clients.
+ (Regression in 2.10.0) SFTP performance fix: override FilterOutputStream.write(byte[], int, int).
+ Fixed a race condition to ensure SSH_MSG_CHANNEL_EOF is always sent before SSH_MSG_CHANNEL_CLOSE.
+ Fixed error handling while flushing queued packets at end of KEX.
+ Fixed wrong log level on closing an Nio2Session.
+ Fixed detection of Android O/S from system properties.
+ Consider all applicable host keys from the known_hosts files.
+ SftpFileSystem: do not close user session.
+ ChannelAsyncOutputStream: remove write future when done.
+ SSHD-1332 (Regression in 2.10.0) Resolve ~ in IdentityFile file names in HostConfigEntry.
* New Features:
+ Use KeepAliveHandler global request instance in client as well
+ Publish snapshot maven artifacts to the Apache Snapshots maven repository.
+ Bundle sshd-contrib has support classes for the HAProxy protocol V2.
- Other changes in version 2.10.0:
* Bugs fixed:
+ Connection attempt not canceled when a connection timeout occurs
+ Possible OOM in ChannelPipedInputStream
+ SftpRemotePathChannel.transferFrom(...) ignores position argument
+ Rooted file system can leak informations
+ Failed to establish an SSH connection because the server identifier exceeds the int range
* Improvements:
+ Password in clear in SSHD server's logs
- Other changes in version 2.9.2:
* Bugs fixed:
+ SFTP worker threads got stuck while processing PUT methods against one specific SFTP server
+ Use the maximum packet size of the communication partner
+ ExplicitPortForwardingTracker does not unbind auto-allocated one
+ Default SshClient FD leak because Selector not closed
+ Reading again from exhausted ChannelExec#getInvertedOut() throws IOException instead of returning -1
+ Keeping error streams and input streams separate after ChannelExec#setRedirectErrorStream(true) is called
+ Nio2Session.shutdownOutput() should wait for writes in progress
* Test:
+ Research intermittent failure in unit tests using various I/O
service factories
- Other changes in version 2.9.1:
* Bugs fixed:
+ ClientSession.auth().verify() is terminated with timeout
+ 2.9.0 release broken on Java 8
+ Infinite loop in org.apache.sshd.sftp.client.impl.SftpInputStreamAsync#doRead
+ Deadlock during session exit
+ Race condition is logged in ChannelAsyncOutputStream
- Other changes in version 2.9.0:
* Bugs fixed:
+ Deadlock on disconnection at the end of key-exchange
+ Remote port forwarding mode does not handle EOF properly
+ Public key authentication: wrong signature algorithm used (ed25519 key with ssh-rsa signature)
+ Client fails window adjust above Integer.MAX_VALUE
+ class loader fails to load org.apache.sshd.common.cipher.BaseGCMCipher
+ Shell is not getting closed if the command has already closed the OutputStream it is using.
+ Sometimes async write listener is not called
+ Unhandled SSH_MSG_CHANNEL_WINDOW_ADJUST leeds to SocketTimeoutException
+ different host key algorithm used on rekey than used for the initial connection
+ OpenSSH certificate is not properly encoded when critical options are included
+ TCP/IP remote port forwarding with wildcard IP addresses doesn't work with OpenSSH
+ UserAuthPublicKey: uses ssh-rsa signatures for RSA keys from an agent
* New Features:
+ Added support for Argon2 encrypted PUTTY key files
+ Added support for merged inverted output and error streams of remote process
* Improvements:
+ Added support for 'limits@openssh.com' SFTP extension
+ Support host-based pubkey authentication in the client
+ Send environment variable and open subsystem at the same time for SSH session
- Other changes in version 2.8.0:
* Bugs fixed:
+ Fixed wrong server key algorithm choice
+ Expiration of OpenSshCertificates needs to compare timestamps as unsigned long
+ SFTP Get downloads empty file from servers which supports EOF indication after data
+ skip() doesn't work properly in SftpInputStreamAsync
+ OpenMode and CopyMode is not honored as expected in version > 4 of SFTP api
+ SftpTransferTest sometimes hangs (failure during rekeying)
+ Race condition in KEX
+ Fix the ciphers supported documentation
+ Update tarLongFileMode to use POSIX
+ WinsCP transfer failure to Apache SSHD Server
+ Pubkey auth: keys from ssh-agent are used even if HostConfigEntry.isIdentitiesOnly() is true
+ Support RSA SHA2 signatures via SSH agent
+ NOTICE: wrong copyright year range
+ Wrong creationTime in writeAttrs for SFTP
+ sshd-netty logs all traffic on INFO level
* New Features:
+ Add support for chacha20-poly1305@openssh.com
+ Parsing of ~/.ssh/config Host patterns fails with extra
whitespace
+ Support generating OpenSSH client certificates
* Improvements:
+ Add support for curve25519-sha256@libssh.org key exchange
+ OpenSSH certificates: check certificate type
+ OpenSSHCertificatesTest: certificates expire in 2030
+ Display IdleTimeOut in more user-friendly format
+ sendChunkIfRemoteWindowIsSmallerThanPacketSize flag in ChannelAsyncOutputStream constructor configurable from
outside using variable/config file
+ Intercepting the server exception message from server in SSHD client
+ Implement RFC 8332 server-sig-algs on the server
+ Slow performance listing huge number of files on Apache SSHD server
+ SFTP: too many LSTAT calls
+ Support key constraints when adding a key to an SSH agent
+ Add SFTP server side file custom attributes hook
Patchnames: SUSE-2024-224,SUSE-SLE-Module-Development-Tools-15-SP5-2024-224,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-224,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-224,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-224,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-224,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-224,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-224,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-224,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-224,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-224,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-224,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-224,SUSE-Storage-7.1-2024-224,openSUSE-SLE-15.5-2024-224
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9.8 (Critical)
Affected products
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:apache-parent-31-150200.3.12.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
Threats
Impact
critical
5.9 (Medium)
Affected products
Recommended
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:apache-parent-31-150200.3.12.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:apache-sshd-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
References
13 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for apache-parent, apache-sshd",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for apache-parent, apache-sshd fixes the following issues:\n\napache-parent was updated from version 28 to 31:\n\n- Version 31:\n * New Features:\n + Added maven-checkstyle-plugin to pluginManagement\n * Improvements:\n + Set minimalMavenBuildVersion to 3.6.3 - the minimum\n used by plugins\n + Using an SPDX identifier as the license name is\n recommended by Maven\n + Use properties to define the versions of plugins\n * Bugs fixed:\n + Updated documentation for previous changes\n\napache-sshd was updated from version 2.7.0 to 2.12.0:\n\n- Security issues fixed:\n * CVE-2023-48795: Implemented OpenSSH \u0027strict key exchange\u0027 protocol in apache-sshd version 2.12.0 (bsc#1218189)\n * CVE-2022-45047: Java unsafe deserialization vulnerability fixed in apache-sshd version 2.9.2 (bsc#1205463)\n\n- Other changes in version 2.12.0:\n * Bugs fixed:\n + SCP client fails silently when error signalled due to missing file or lacking permissions\n + Ignore unknown key types from agent or in OpenSSH host keys extension\n * New Features:\n + Support GIT protocol-v2\n- Other changes in version 2.11.0:\n * Bugs fixed:\n + Added configurable timeout(s) to DefaultSftpClient\n + Compare file keys in ModifiableFileWatcher.\n + Fixed channel pool in SftpFileSystem.\n + Use correct default OpenOptions in SftpFileSystemProvider.newFileChannel().\n + Use correct lock modes for SFTP FileChannel.lock().\n + ScpClient: support issuing commands to a server that uses a non-UTF-8 locale.\n + SftpInputStreamAsync: fix reporting EOF on zero-length reads.\n + Work-around a bug in WS_FTP \u003c= 12.9 SFTP clients.\n + (Regression in 2.10.0) SFTP performance fix: override FilterOutputStream.write(byte[], int, int).\n + Fixed a race condition to ensure SSH_MSG_CHANNEL_EOF is always sent before SSH_MSG_CHANNEL_CLOSE.\n + Fixed error handling while flushing queued packets at end of KEX.\n + Fixed wrong log level on closing an Nio2Session.\n + Fixed detection of Android O/S from system properties.\n + Consider all applicable host keys from the known_hosts files.\n + SftpFileSystem: do not close user session.\n + ChannelAsyncOutputStream: remove write future when done.\n + SSHD-1332 (Regression in 2.10.0) Resolve ~ in IdentityFile file names in HostConfigEntry.\n * New Features:\n + Use KeepAliveHandler global request instance in client as well\n + Publish snapshot maven artifacts to the Apache Snapshots maven repository.\n + Bundle sshd-contrib has support classes for the HAProxy protocol V2.\n- Other changes in version 2.10.0:\n * Bugs fixed:\n + Connection attempt not canceled when a connection timeout occurs\n + Possible OOM in ChannelPipedInputStream\n + SftpRemotePathChannel.transferFrom(...) ignores position argument\n + Rooted file system can leak informations\n + Failed to establish an SSH connection because the server identifier exceeds the int range\n * Improvements:\n + Password in clear in SSHD server\u0027s logs\n- Other changes in version 2.9.2:\n * Bugs fixed:\n + SFTP worker threads got stuck while processing PUT methods against one specific SFTP server\n + Use the maximum packet size of the communication partner\n + ExplicitPortForwardingTracker does not unbind auto-allocated one\n + Default SshClient FD leak because Selector not closed\n + Reading again from exhausted ChannelExec#getInvertedOut() throws IOException instead of returning -1\n + Keeping error streams and input streams separate after ChannelExec#setRedirectErrorStream(true) is called\n + Nio2Session.shutdownOutput() should wait for writes in progress\n * Test:\n + Research intermittent failure in unit tests using various I/O\n service factories\n- Other changes in version 2.9.1:\n * Bugs fixed:\n + ClientSession.auth().verify() is terminated with timeout\n + 2.9.0 release broken on Java 8\n + Infinite loop in org.apache.sshd.sftp.client.impl.SftpInputStreamAsync#doRead\n + Deadlock during session exit\n + Race condition is logged in ChannelAsyncOutputStream\n- Other changes in version 2.9.0:\n * Bugs fixed:\n + Deadlock on disconnection at the end of key-exchange\n + Remote port forwarding mode does not handle EOF properly\n + Public key authentication: wrong signature algorithm used (ed25519 key with ssh-rsa signature)\n + Client fails window adjust above Integer.MAX_VALUE\n + class loader fails to load org.apache.sshd.common.cipher.BaseGCMCipher\n + Shell is not getting closed if the command has already closed the OutputStream it is using.\n + Sometimes async write listener is not called\n + Unhandled SSH_MSG_CHANNEL_WINDOW_ADJUST leeds to SocketTimeoutException\n + different host key algorithm used on rekey than used for the initial connection\n + OpenSSH certificate is not properly encoded when critical options are included\n + TCP/IP remote port forwarding with wildcard IP addresses doesn\u0027t work with OpenSSH\n + UserAuthPublicKey: uses ssh-rsa signatures for RSA keys from an agent\n * New Features:\n + Added support for Argon2 encrypted PUTTY key files\n + Added support for merged inverted output and error streams of remote process\n * Improvements:\n + Added support for \u0027limits@openssh.com\u0027 SFTP extension\n + Support host-based pubkey authentication in the client\n + Send environment variable and open subsystem at the same time for SSH session\n- Other changes in version 2.8.0:\n * Bugs fixed:\n + Fixed wrong server key algorithm choice\n + Expiration of OpenSshCertificates needs to compare timestamps as unsigned long\n + SFTP Get downloads empty file from servers which supports EOF indication after data\n + skip() doesn\u0027t work properly in SftpInputStreamAsync\n + OpenMode and CopyMode is not honored as expected in version \u003e 4 of SFTP api\n + SftpTransferTest sometimes hangs (failure during rekeying)\n + Race condition in KEX\n + Fix the ciphers supported documentation\n + Update tarLongFileMode to use POSIX\n + WinsCP transfer failure to Apache SSHD Server\n + Pubkey auth: keys from ssh-agent are used even if HostConfigEntry.isIdentitiesOnly() is true\n + Support RSA SHA2 signatures via SSH agent\n + NOTICE: wrong copyright year range\n + Wrong creationTime in writeAttrs for SFTP\n + sshd-netty logs all traffic on INFO level\n * New Features:\n + Add support for chacha20-poly1305@openssh.com\n + Parsing of ~/.ssh/config Host patterns fails with extra\n whitespace\n + Support generating OpenSSH client certificates\n * Improvements:\n + Add support for curve25519-sha256@libssh.org key exchange\n + OpenSSH certificates: check certificate type\n + OpenSSHCertificatesTest: certificates expire in 2030\n + Display IdleTimeOut in more user-friendly format\n + sendChunkIfRemoteWindowIsSmallerThanPacketSize flag in ChannelAsyncOutputStream constructor configurable from\n outside using variable/config file\n + Intercepting the server exception message from server in SSHD client\n + Implement RFC 8332 server-sig-algs on the server\n + Slow performance listing huge number of files on Apache SSHD server\n + SFTP: too many LSTAT calls\n + Support key constraints when adding a key to an SSH agent\n + Add SFTP server side file custom attributes hook\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-224,SUSE-SLE-Module-Development-Tools-15-SP5-2024-224,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-224,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-224,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-224,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-224,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-224,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-224,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-224,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-224,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-224,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-224,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-224,SUSE-Storage-7.1-2024-224,openSUSE-SLE-15.5-2024-224",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0224-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0224-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240224-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0224-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017759.html"
},
{
"category": "self",
"summary": "SUSE Bug 1205463",
"url": "https://bugzilla.suse.com/1205463"
},
{
"category": "self",
"summary": "SUSE Bug 1218189",
"url": "https://bugzilla.suse.com/1218189"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-45047 page",
"url": "https://www.suse.com/security/cve/CVE-2022-45047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for apache-parent, apache-sshd",
"tracking": {
"current_release_date": "2024-01-25T08:27:16Z",
"generator": {
"date": "2024-01-25T08:27:16Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0224-1",
"initial_release_date": "2024-01-25T08:27:16Z",
"revision_history": [
{
"date": "2024-01-25T08:27:16Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "apache-parent-31-150200.3.12.1.noarch",
"product": {
"name": "apache-parent-31-150200.3.12.1.noarch",
"product_id": "apache-parent-31-150200.3.12.1.noarch"
}
},
{
"category": "product_version",
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"product": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"product_id": "apache-sshd-2.12.0-150200.5.8.1.noarch"
}
},
{
"category": "product_version",
"name": "apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch",
"product": {
"name": "apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch",
"product_id": "apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-parent-31-150200.3.12.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:apache-parent-31-150200.3.12.1.noarch"
},
"product_reference": "apache-parent-31-150200.3.12.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-2.12.0-150200.5.8.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:apache-sshd-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch"
},
"product_reference": "apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-45047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-45047"
}
],
"notes": [
{
"category": "general",
"text": "Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD \u003c= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-parent-31-150200.3.12.1.noarch",
"openSUSE Leap 15.5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-45047",
"url": "https://www.suse.com/security/cve/CVE-2022-45047"
},
{
"category": "external",
"summary": "SUSE Bug 1205463 for CVE-2022-45047",
"url": "https://bugzilla.suse.com/1205463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-parent-31-150200.3.12.1.noarch",
"openSUSE Leap 15.5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-parent-31-150200.3.12.1.noarch",
"openSUSE Leap 15.5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-01-25T08:27:16Z",
"details": "critical"
}
],
"title": "CVE-2022-45047"
},
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-parent-31-150200.3.12.1.noarch",
"openSUSE Leap 15.5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-parent-31-150200.3.12.1.noarch",
"openSUSE Leap 15.5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache-sshd-2.12.0-150200.5.8.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-parent-31-150200.3.12.1.noarch",
"openSUSE Leap 15.5:apache-sshd-2.12.0-150200.5.8.1.noarch",
"openSUSE Leap 15.5:apache-sshd-javadoc-2.12.0-150200.5.8.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-01-25T08:27:16Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0327-1
Vulnerability from csaf_suse - Published: 2024-02-05 12:21 - Updated: 2024-02-05 12:21Summary
Security update for bouncycastle, jsch
Severity
Important
Notes
Title of the patch: Security update for bouncycastle, jsch
Description of the patch: This update for bouncycastle, jsch fixes the following issues:
- Updated jsch to version 0.2.15:
- CVE-2023-48795: Fixed a prefix truncation issue that could lead to
disclosure of sensitive information (bsc#1218134).
- Updated bouncycastle to version 1.77.
Patchnames: SUSE-2024-327,SUSE-SLE-Module-Development-Tools-15-SP5-2024-327,SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-327,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-327,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-327,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-327,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-327,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-327,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-327,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-327,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-327,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-327,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-327,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-327,SUSE-Storage-7.1-2024-327,openSUSE-SLE-15.5-2024-327
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
72 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP5:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server Module 4.3:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:bouncycastle-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:bouncycastle-javadoc-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:bouncycastle-jmail-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:bouncycastle-mail-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:bouncycastle-pg-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:bouncycastle-pkix-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:bouncycastle-tls-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:bouncycastle-util-1.77-150200.3.24.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-demo-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-javadoc-0.2.15-150200.11.13.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for bouncycastle, jsch",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for bouncycastle, jsch fixes the following issues:\n\n- Updated jsch to version 0.2.15:\n\n - CVE-2023-48795: Fixed a prefix truncation issue that could lead to\n disclosure of sensitive information (bsc#1218134).\n\n- Updated bouncycastle to version 1.77.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-327,SUSE-SLE-Module-Development-Tools-15-SP5-2024-327,SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-327,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-327,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-327,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-327,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-327,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-327,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-327,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-327,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-327,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-327,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-327,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-327,SUSE-Storage-7.1-2024-327,openSUSE-SLE-15.5-2024-327",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0327-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0327-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240327-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0327-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017866.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218134",
"url": "https://bugzilla.suse.com/1218134"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for bouncycastle, jsch",
"tracking": {
"current_release_date": "2024-02-05T12:21:15Z",
"generator": {
"date": "2024-02-05T12:21:15Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0327-1",
"initial_release_date": "2024-02-05T12:21:15Z",
"revision_history": [
{
"date": "2024-02-05T12:21:15Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "bouncycastle-1.77-150200.3.24.1.noarch",
"product": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch",
"product_id": "bouncycastle-1.77-150200.3.24.1.noarch"
}
},
{
"category": "product_version",
"name": "bouncycastle-javadoc-1.77-150200.3.24.1.noarch",
"product": {
"name": "bouncycastle-javadoc-1.77-150200.3.24.1.noarch",
"product_id": "bouncycastle-javadoc-1.77-150200.3.24.1.noarch"
}
},
{
"category": "product_version",
"name": "bouncycastle-jmail-1.77-150200.3.24.1.noarch",
"product": {
"name": "bouncycastle-jmail-1.77-150200.3.24.1.noarch",
"product_id": "bouncycastle-jmail-1.77-150200.3.24.1.noarch"
}
},
{
"category": "product_version",
"name": "bouncycastle-mail-1.77-150200.3.24.1.noarch",
"product": {
"name": "bouncycastle-mail-1.77-150200.3.24.1.noarch",
"product_id": "bouncycastle-mail-1.77-150200.3.24.1.noarch"
}
},
{
"category": "product_version",
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"product": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"product_id": "bouncycastle-pg-1.77-150200.3.24.1.noarch"
}
},
{
"category": "product_version",
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"product": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"product_id": "bouncycastle-pkix-1.77-150200.3.24.1.noarch"
}
},
{
"category": "product_version",
"name": "bouncycastle-tls-1.77-150200.3.24.1.noarch",
"product": {
"name": "bouncycastle-tls-1.77-150200.3.24.1.noarch",
"product_id": "bouncycastle-tls-1.77-150200.3.24.1.noarch"
}
},
{
"category": "product_version",
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"product": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"product_id": "bouncycastle-util-1.77-150200.3.24.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-0.2.15-150200.11.13.1.noarch",
"product": {
"name": "jsch-0.2.15-150200.11.13.1.noarch",
"product_id": "jsch-0.2.15-150200.11.13.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-demo-0.2.15-150200.11.13.1.noarch",
"product": {
"name": "jsch-demo-0.2.15-150200.11.13.1.noarch",
"product_id": "jsch-demo-0.2.15-150200.11.13.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-javadoc-0.2.15-150200.11.13.1.noarch",
"product": {
"name": "jsch-javadoc-0.2.15-150200.11.13.1.noarch",
"product_id": "jsch-javadoc-0.2.15-150200.11.13.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server Module 4.3",
"product": {
"name": "SUSE Manager Server Module 4.3",
"product_id": "SUSE Manager Server Module 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-suse-manager-server:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise Module for Development Tools 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP5:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Manager Server Module 4.3",
"product_id": "SUSE Manager Server Module 4.3:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Manager Server Module 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-1.77-150200.3.24.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:bouncycastle-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-javadoc-1.77-150200.3.24.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:bouncycastle-javadoc-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-javadoc-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-jmail-1.77-150200.3.24.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:bouncycastle-jmail-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-jmail-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-mail-1.77-150200.3.24.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:bouncycastle-mail-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-mail-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pg-1.77-150200.3.24.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:bouncycastle-pg-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pg-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-pkix-1.77-150200.3.24.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:bouncycastle-pkix-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-tls-1.77-150200.3.24.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:bouncycastle-tls-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-tls-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bouncycastle-util-1.77-150200.3.24.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:bouncycastle-util-1.77-150200.3.24.1.noarch"
},
"product_reference": "bouncycastle-util-1.77-150200.3.24.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-0.2.15-150200.11.13.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-demo-0.2.15-150200.11.13.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-demo-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-demo-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-javadoc-0.2.15-150200.11.13.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-javadoc-0.2.15-150200.11.13.1.noarch"
},
"product_reference": "jsch-javadoc-0.2.15-150200.11.13.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Manager Server Module 4.3:jsch-0.2.15-150200.11.13.1.noarch",
"openSUSE Leap 15.5:bouncycastle-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-javadoc-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-jmail-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-mail-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-tls-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-util-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:jsch-0.2.15-150200.11.13.1.noarch",
"openSUSE Leap 15.5:jsch-demo-0.2.15-150200.11.13.1.noarch",
"openSUSE Leap 15.5:jsch-javadoc-0.2.15-150200.11.13.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Manager Server Module 4.3:jsch-0.2.15-150200.11.13.1.noarch",
"openSUSE Leap 15.5:bouncycastle-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-javadoc-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-jmail-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-mail-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-tls-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-util-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:jsch-0.2.15-150200.11.13.1.noarch",
"openSUSE Leap 15.5:jsch-demo-0.2.15-150200.11.13.1.noarch",
"openSUSE Leap 15.5:jsch-javadoc-0.2.15-150200.11.13.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Enterprise Storage 7.1:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Module for Development Tools 15 SP5:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP3-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server 15 SP4-LTSS:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:bouncycastle-util-1.77-150200.3.24.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:jsch-0.2.15-150200.11.13.1.noarch",
"SUSE Manager Server Module 4.3:jsch-0.2.15-150200.11.13.1.noarch",
"openSUSE Leap 15.5:bouncycastle-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-javadoc-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-jmail-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-mail-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-pg-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-pkix-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-tls-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:bouncycastle-util-1.77-150200.3.24.1.noarch",
"openSUSE Leap 15.5:jsch-0.2.15-150200.11.13.1.noarch",
"openSUSE Leap 15.5:jsch-demo-0.2.15-150200.11.13.1.noarch",
"openSUSE Leap 15.5:jsch-javadoc-0.2.15-150200.11.13.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-05T12:21:15Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0430-1
Vulnerability from csaf_suse - Published: 2024-02-08 14:03 - Updated: 2024-02-08 14:03Summary
Security update for cosign
Severity
Moderate
Notes
Title of the patch: Security update for cosign
Description of the patch: This update for cosign fixes the following issues:
Updated to 2.2.3 (jsc#SLE-23879):
Bug Fixes:
* Fix race condition on verification with multiple signatures attached to image (#3486)
* fix(clean): Fix clean cmd for private registries (#3446)
* Fixed BYO PKI verification (#3427)
Features:
* Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
* Add support for OpenVEX predicate type (#3405)
Documentation:
* Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
* add examples for cosign attach signature cmd (#3468)
Misc:
* Remove CertSubject function (#3467)
* Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)
Updated to 2.2.2 (jsc#SLE-23879):
v2.2.2 adds a new container with a shell,
gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
For private deployments, we have also added an alias for
--insecure-skip-log, --private-infrastructure.
Bug Fixes:
* chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
* Don't require CT log keys if using a key/sk (#3415)
* Fix copy without any flag set (#3409)
* Update cosign generate cmd to not include newline (#3393)
* Fix idempotency error with signing (#3371)
Features:
* Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
* Use the timeout flag value in verify* commands. (#3391)
* add --private-infrastructure flag (#3369)
Container Updates:
* Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
Documentation:
* Update SBOM_SPEC.md (#3358)
- CVE-2023-48795: Fixed the Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207).
Patchnames: SUSE-2024-430,SUSE-SLE-Module-Basesystem-15-SP5-2024-430,openSUSE-SLE-15.5-2024-430
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for cosign",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for cosign fixes the following issues:\n\nUpdated to 2.2.3 (jsc#SLE-23879):\n\nBug Fixes:\n\n* Fix race condition on verification with multiple signatures attached to image (#3486)\n* fix(clean): Fix clean cmd for private registries (#3446)\n* Fixed BYO PKI verification (#3427)\n\nFeatures:\n\n* Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)\n* Add support for OpenVEX predicate type (#3405)\n\nDocumentation:\n\n* Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)\n* add examples for cosign attach signature cmd (#3468)\n\nMisc:\n\n* Remove CertSubject function (#3467)\n* Use local rekor and fulcio instances in e2e tests (#3478)\n\n- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)\n\nUpdated to 2.2.2 (jsc#SLE-23879):\n\nv2.2.2 adds a new container with a shell,\ngcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing\ncontainer gcr.io/projectsigstore/cosign:vx.y.z without a shell.\n\nFor private deployments, we have also added an alias for\n--insecure-skip-log, --private-infrastructure.\n\nBug Fixes:\n\n* chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS\n* Don\u0027t require CT log keys if using a key/sk (#3415)\n* Fix copy without any flag set (#3409)\n* Update cosign generate cmd to not include newline (#3393)\n* Fix idempotency error with signing (#3371)\n\nFeatures:\n\n* Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)\n* Use the timeout flag value in verify* commands. (#3391)\n* add --private-infrastructure flag (#3369)\n\nContainer Updates:\n\n* Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)\n\nDocumentation:\n\n* Update SBOM_SPEC.md (#3358)\n\n- CVE-2023-48795: Fixed the Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-430,SUSE-SLE-Module-Basesystem-15-SP5-2024-430,openSUSE-SLE-15.5-2024-430",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0430-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0430-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240430-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0430-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017891.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218207",
"url": "https://bugzilla.suse.com/1218207"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for cosign",
"tracking": {
"current_release_date": "2024-02-08T14:03:31Z",
"generator": {
"date": "2024-02-08T14:03:31Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0430-1",
"initial_release_date": "2024-02-08T14:03:31Z",
"revision_history": [
{
"date": "2024-02-08T14:03:31Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.aarch64",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.aarch64",
"product_id": "cosign-2.2.3-150400.3.17.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.i586",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.i586",
"product_id": "cosign-2.2.3-150400.3.17.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.ppc64le",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.ppc64le",
"product_id": "cosign-2.2.3-150400.3.17.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.s390x",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.s390x",
"product_id": "cosign-2.2.3-150400.3.17.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.x86_64",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.x86_64",
"product_id": "cosign-2.2.3-150400.3.17.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-08T14:03:31Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0460-1
Vulnerability from csaf_suse - Published: 2024-02-13 14:29 - Updated: 2024-02-13 14:29Summary
Security update for rekor
Severity
Important
Notes
Title of the patch: Security update for rekor
Description of the patch: This update for rekor fixes the following issues:
update to 1.3.5 (jsc#SLE-23476):
- Additional unique index correction
- Remove timestamp from checkpoint
- Drop conditional when verifying entry checkpoint
- Fix panic for DSSE canonicalization
- Change Redis value for locking mechanism
- give log timestamps nanosecond precision
- output trace in slog and override correlation header name
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)
Updated to 1.3.4:
* add mysql indexstorage backend
* add s3 storage for attestations
* fix: Do not check for pubsub.topics.get on initialization
* fix optional field in cose schema
* Update ranges.go
* update indexstorage interface to reduce roundtrips
* use a single validator library in rekor-cli
* Remove go-playground/validator dependency from pkg/pki
Updated to rekor 1.3.3 (jsc#SLE-23476):
- Update signer flag description
- update trillian to 1.5.3
- adds redis_auth
- Add method to get artifact hash for an entry
- make e2e tests more usable with docker-compose
- install go at correct version for codeql
Updated to rekor 1.3.2 (jsc#SLE-23476):
Updated to rekor 1.3.1 (jsc#SLE-23476):
New Features:
- enable GCP cloud profiling on rekor-server (#1746)
- move index storage into interface (#1741)
- add info to readme to denote additional documentation sources (#1722)
- Add type of ed25519 key for TUF (#1677)
- Allow parsing base64-encoded TUF metadata and root content (#1671)
Quality Enhancements:
- disable quota in trillian in test harness (#1680)
Bug Fixes:
- Update contact for code of conduct (#1720)
- Fix panic when parsing SSH SK pubkeys (#1712)
- Correct index creation (#1708)
- docs: fixzes a small typo on the readme (#1686)
- chore: fix backfill-redis Makefile target (#1685)
Updated to rekor 1.3.0 (jsc#SLE-23476):
- Update openapi.yaml (#1655)
- pass transient errors through retrieveLogEntry (#1653)
- return full entryID on HTTP 409 responses (#1650)
- feat: Support publishing new log entries to Pub/Sub topics (#1580)
- Change values of Identity.Raw, add fingerprints (#1628)
- Extract all subjects from SANs for x509 verifier (#1632)
- Fix type comment for Identity struct (#1619)
- Refactor Identities API (#1611)
- Refactor Verifiers to return multiple keys (#1601)
- Update checkpoint link (#1597)
- Use correct log index in inclusion proof (#1599)
- remove instrumentation library (#1595)
Updated to rekor 1.2.2 (jsc#SLE-23476):
- pass down error with message instead of nil
- swap killswitch for 'docker-compose restart'
- CVE-2023-48795: Fixed Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207).
Patchnames: SUSE-2024-460,SUSE-SLE-Module-Basesystem-15-SP5-2024-460,openSUSE-SLE-15.5-2024-460
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rekor",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rekor fixes the following issues:\n\nupdate to 1.3.5 (jsc#SLE-23476):\n\n - Additional unique index correction\n - Remove timestamp from checkpoint\n - Drop conditional when verifying entry checkpoint\n - Fix panic for DSSE canonicalization\n - Change Redis value for locking mechanism\n - give log timestamps nanosecond precision\n - output trace in slog and override correlation header name\n\n- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)\n\nUpdated to 1.3.4:\n\n * add mysql indexstorage backend\n * add s3 storage for attestations\n * fix: Do not check for pubsub.topics.get on initialization\n * fix optional field in cose schema\n * Update ranges.go\n * update indexstorage interface to reduce roundtrips\n * use a single validator library in rekor-cli\n * Remove go-playground/validator dependency from pkg/pki\n\nUpdated to rekor 1.3.3 (jsc#SLE-23476):\n\n - Update signer flag description\n - update trillian to 1.5.3\n - adds redis_auth\n - Add method to get artifact hash for an entry\n - make e2e tests more usable with docker-compose\n - install go at correct version for codeql\n\nUpdated to rekor 1.3.2 (jsc#SLE-23476):\n\n\nUpdated to rekor 1.3.1 (jsc#SLE-23476):\n\nNew Features:\n\n - enable GCP cloud profiling on rekor-server (#1746)\n - move index storage into interface (#1741)\n - add info to readme to denote additional documentation sources (#1722)\n - Add type of ed25519 key for TUF (#1677)\n - Allow parsing base64-encoded TUF metadata and root content (#1671)\n\n Quality Enhancements:\n\n - disable quota in trillian in test harness (#1680)\n\n Bug Fixes:\n\n - Update contact for code of conduct (#1720)\n - Fix panic when parsing SSH SK pubkeys (#1712)\n - Correct index creation (#1708)\n - docs: fixzes a small typo on the readme (#1686)\n - chore: fix backfill-redis Makefile target (#1685)\n\nUpdated to rekor 1.3.0 (jsc#SLE-23476):\n\n - Update openapi.yaml (#1655)\n - pass transient errors through retrieveLogEntry (#1653)\n - return full entryID on HTTP 409 responses (#1650)\n - feat: Support publishing new log entries to Pub/Sub topics (#1580)\n - Change values of Identity.Raw, add fingerprints (#1628)\n - Extract all subjects from SANs for x509 verifier (#1632)\n - Fix type comment for Identity struct (#1619)\n - Refactor Identities API (#1611)\n - Refactor Verifiers to return multiple keys (#1601)\n - Update checkpoint link (#1597)\n - Use correct log index in inclusion proof (#1599)\n - remove instrumentation library (#1595)\n\nUpdated to rekor 1.2.2 (jsc#SLE-23476):\n\n - pass down error with message instead of nil\n - swap killswitch for \u0027docker-compose restart\u0027\n\n- CVE-2023-48795: Fixed Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-460,SUSE-SLE-Module-Basesystem-15-SP5-2024-460,openSUSE-SLE-15.5-2024-460",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0460-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0460-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240460-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0460-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017909.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218207",
"url": "https://bugzilla.suse.com/1218207"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for rekor",
"tracking": {
"current_release_date": "2024-02-13T14:29:55Z",
"generator": {
"date": "2024-02-13T14:29:55Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0460-1",
"initial_release_date": "2024-02-13T14:29:55Z",
"revision_history": [
{
"date": "2024-02-13T14:29:55Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.aarch64",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.aarch64",
"product_id": "rekor-1.3.5-150400.4.19.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.i586",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.i586",
"product_id": "rekor-1.3.5-150400.4.19.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.ppc64le",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.ppc64le",
"product_id": "rekor-1.3.5-150400.4.19.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.s390x",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.s390x",
"product_id": "rekor-1.3.5-150400.4.19.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.x86_64",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.x86_64",
"product_id": "rekor-1.3.5-150400.4.19.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-13T14:29:55Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0525-1
Vulnerability from csaf_suse - Published: 2024-02-19 07:04 - Updated: 2024-02-19 07:04Summary
Security update for libssh
Severity
Important
Notes
Title of the patch: Security update for libssh
Description of the patch: This update for libssh fixes the following issues:
Update to version 0.9.8 (jsc#PED-7719):
* Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
* Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
* Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
* Allow @ in usernames when parsing from URI composes
Update to version 0.9.7:
* Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
guessing (bsc#1211188)
* Fix CVE-2023-2283: a possible authorization bypass in
pki_verify_data_signature under low-memory conditions (bsc#1211190)
* Fix several memory leaks in GSSAPI handling code
Update to version 0.9.6 (bsc#1189608, CVE-2021-3634):
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6
Update to 0.9.5 (bsc#1174713, CVE-2020-16135):
* CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
* Improve handling of library initialization (T222)
* Fix parsing of subsecond times in SFTP (T219)
* Make the documentation reproducible
* Remove deprecated API usage in OpenSSL
* Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
* Define version in one place (T226)
* Prevent invalid free when using different C runtimes than OpenSSL (T229)
* Compatibility improvements to testsuite
Update to version 0.9.4
* https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
* Fix possible Denial of Service attack when using AES-CTR-ciphers
CVE-2020-1730 (bsc#1168699)
Update to version 0.9.3
* Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
* SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
* SSH-01-006 General: Various unchecked Null-derefs cause DOS
* SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
* SSH-01-010 SSH: Deprecated hash function in fingerprinting
* SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
* SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
* SSH-01-001 State Machine: Initial machine states should be set explicitly
* SSH-01-002 Kex: Differently bound macros used to iterate same array
* SSH-01-005 Code-Quality: Integer sign confusion during assignments
* SSH-01-008 SCP: Protocol Injection via unescaped File Names
* SSH-01-009 SSH: Update documentation which RFCs are implemented
* SSH-01-012 PKI: Information leak via uninitialized stack buffer
Update to version 0.9.2
* Fixed libssh-config.cmake
* Fixed issues with rsa algorithm negotiation (T191)
* Fixed detection of OpenSSL ed25519 support (T197)
Update to version 0.9.1
* Added support for Ed25519 via OpenSSL
* Added support for X25519 via OpenSSL
* Added support for localuser in Match keyword
* Fixed Match keyword to be case sensitive
* Fixed compilation with LibreSSL
* Fixed error report of channel open (T75)
* Fixed sftp documentation (T137)
* Fixed known_hosts parsing (T156)
* Fixed build issue with MinGW (T157)
* Fixed build with gcc 9 (T164)
* Fixed deprecation issues (T165)
* Fixed known_hosts directory creation (T166)
- Split out configuration to separate package to not mess up the
library packaging and coinstallation
Update to verion 0.9.0
* Added support for AES-GCM
* Added improved rekeying support
* Added performance improvements
* Disabled blowfish support by default
* Fixed several ssh config parsing issues
* Added support for DH Group Exchange KEX
* Added support for Encrypt-then-MAC mode
* Added support for parsing server side configuration file
* Added support for ECDSA/Ed25519 certificates
* Added FIPS 140-2 compatibility
* Improved known_hosts parsing
* Improved documentation
* Improved OpenSSL API usage for KEX, DH, and signatures
- Add libssh client and server config files
Patchnames: SUSE-2024-525,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-525,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-525,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-525,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-525,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-525,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-525,SUSE-SUSE-MicroOS-5.1-2024-525,SUSE-SUSE-MicroOS-5.2-2024-525,SUSE-Storage-7.1-2024-525
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.8 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
43 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libssh fixes the following issues:\n\nUpdate to version 0.9.8 (jsc#PED-7719):\n\n* Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)\n* Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)\n* Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)\n* Allow @ in usernames when parsing from URI composes\n\nUpdate to version 0.9.7:\n\n* Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm\n guessing (bsc#1211188)\n* Fix CVE-2023-2283: a possible authorization bypass in\n pki_verify_data_signature under low-memory conditions (bsc#1211190)\n* Fix several memory leaks in GSSAPI handling code\n\nUpdate to version 0.9.6 (bsc#1189608, CVE-2021-3634):\n\n* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6\n\n\nUpdate to 0.9.5 (bsc#1174713, CVE-2020-16135):\n\n* CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)\n* Improve handling of library initialization (T222)\n* Fix parsing of subsecond times in SFTP (T219)\n* Make the documentation reproducible\n* Remove deprecated API usage in OpenSSL\n* Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN\n* Define version in one place (T226)\n* Prevent invalid free when using different C runtimes than OpenSSL (T229)\n* Compatibility improvements to testsuite \n\nUpdate to version 0.9.4\n\n* https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/\n* Fix possible Denial of Service attack when using AES-CTR-ciphers\n CVE-2020-1730 (bsc#1168699)\n\nUpdate to version 0.9.3\n\n* Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)\n* SSH-01-003 Client: Missing NULL check leads to crash in erroneous state\n* SSH-01-006 General: Various unchecked Null-derefs cause DOS\n* SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys\n* SSH-01-010 SSH: Deprecated hash function in fingerprinting\n* SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS\n* SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access\n* SSH-01-001 State Machine: Initial machine states should be set explicitly\n* SSH-01-002 Kex: Differently bound macros used to iterate same array\n* SSH-01-005 Code-Quality: Integer sign confusion during assignments\n* SSH-01-008 SCP: Protocol Injection via unescaped File Names\n* SSH-01-009 SSH: Update documentation which RFCs are implemented\n* SSH-01-012 PKI: Information leak via uninitialized stack buffer\n\nUpdate to version 0.9.2\n\n* Fixed libssh-config.cmake\n* Fixed issues with rsa algorithm negotiation (T191)\n* Fixed detection of OpenSSL ed25519 support (T197)\n\nUpdate to version 0.9.1\n\n* Added support for Ed25519 via OpenSSL\n* Added support for X25519 via OpenSSL\n* Added support for localuser in Match keyword\n* Fixed Match keyword to be case sensitive\n* Fixed compilation with LibreSSL\n* Fixed error report of channel open (T75)\n* Fixed sftp documentation (T137)\n* Fixed known_hosts parsing (T156)\n* Fixed build issue with MinGW (T157)\n* Fixed build with gcc 9 (T164)\n* Fixed deprecation issues (T165)\n* Fixed known_hosts directory creation (T166)\n\n- Split out configuration to separate package to not mess up the\n library packaging and coinstallation\n\nUpdate to verion 0.9.0\n\n* Added support for AES-GCM\n* Added improved rekeying support\n* Added performance improvements\n* Disabled blowfish support by default\n* Fixed several ssh config parsing issues\n* Added support for DH Group Exchange KEX\n* Added support for Encrypt-then-MAC mode\n* Added support for parsing server side configuration file\n* Added support for ECDSA/Ed25519 certificates\n* Added FIPS 140-2 compatibility\n* Improved known_hosts parsing\n* Improved documentation\n* Improved OpenSSL API usage for KEX, DH, and signatures\n\n- Add libssh client and server config files\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-525,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-525,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-525,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-525,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-525,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-525,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-525,SUSE-SUSE-MicroOS-5.1-2024-525,SUSE-SUSE-MicroOS-5.2-2024-525,SUSE-Storage-7.1-2024-525",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0525-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0525-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240525-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0525-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017947.html"
},
{
"category": "self",
"summary": "SUSE Bug 1158095",
"url": "https://bugzilla.suse.com/1158095"
},
{
"category": "self",
"summary": "SUSE Bug 1168699",
"url": "https://bugzilla.suse.com/1168699"
},
{
"category": "self",
"summary": "SUSE Bug 1174713",
"url": "https://bugzilla.suse.com/1174713"
},
{
"category": "self",
"summary": "SUSE Bug 1189608",
"url": "https://bugzilla.suse.com/1189608"
},
{
"category": "self",
"summary": "SUSE Bug 1211188",
"url": "https://bugzilla.suse.com/1211188"
},
{
"category": "self",
"summary": "SUSE Bug 1211190",
"url": "https://bugzilla.suse.com/1211190"
},
{
"category": "self",
"summary": "SUSE Bug 1218126",
"url": "https://bugzilla.suse.com/1218126"
},
{
"category": "self",
"summary": "SUSE Bug 1218186",
"url": "https://bugzilla.suse.com/1218186"
},
{
"category": "self",
"summary": "SUSE Bug 1218209",
"url": "https://bugzilla.suse.com/1218209"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14889 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16135 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-1730 page",
"url": "https://www.suse.com/security/cve/CVE-2020-1730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3634 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1667 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2283 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6004 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6918 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6918/"
}
],
"title": "Security update for libssh",
"tracking": {
"current_release_date": "2024-02-19T07:04:14Z",
"generator": {
"date": "2024-02-19T07:04:14Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0525-1",
"initial_release_date": "2024-02-19T07:04:14Z",
"revision_history": [
{
"date": "2024-02-19T07:04:14Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"product_id": "libssh-config-0.9.8-150200.13.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.aarch64",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64",
"product_id": "libssh4-0.9.8-150200.13.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh4-64bit-0.9.8-150200.13.3.1.aarch64_ilp32",
"product": {
"name": "libssh4-64bit-0.9.8-150200.13.3.1.aarch64_ilp32",
"product_id": "libssh4-64bit-0.9.8-150200.13.3.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.i586",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.i586",
"product_id": "libssh-config-0.9.8-150200.13.3.1.i586"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.i586",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.i586",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.i586"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.i586",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.i586",
"product_id": "libssh4-0.9.8-150200.13.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"product_id": "libssh-config-0.9.8-150200.13.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"product_id": "libssh4-0.9.8-150200.13.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.s390x",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x",
"product_id": "libssh-config-0.9.8-150200.13.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.s390x",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.s390x",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.s390x",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x",
"product_id": "libssh4-0.9.8-150200.13.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"product_id": "libssh-config-0.9.8-150200.13.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.x86_64",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64",
"product_id": "libssh4-0.9.8-150200.13.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"product": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"product_id": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.1",
"product": {
"name": "SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.2",
"product": {
"name": "SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.2"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-14889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14889"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14889",
"url": "https://www.suse.com/security/cve/CVE-2019-14889"
},
{
"category": "external",
"summary": "SUSE Bug 1158095 for CVE-2019-14889",
"url": "https://bugzilla.suse.com/1158095"
},
{
"category": "external",
"summary": "SUSE Bug 1224871 for CVE-2019-14889",
"url": "https://bugzilla.suse.com/1224871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "important"
}
],
"title": "CVE-2019-14889"
},
{
"cve": "CVE-2020-16135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16135"
}
],
"notes": [
{
"category": "general",
"text": "libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16135",
"url": "https://www.suse.com/security/cve/CVE-2020-16135"
},
{
"category": "external",
"summary": "SUSE Bug 1174713 for CVE-2020-16135",
"url": "https://bugzilla.suse.com/1174713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2020-16135"
},
{
"cve": "CVE-2020-1730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-1730"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn\u0027t been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-1730",
"url": "https://www.suse.com/security/cve/CVE-2020-1730"
},
{
"category": "external",
"summary": "SUSE Bug 1168699 for CVE-2020-1730",
"url": "https://bugzilla.suse.com/1168699"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2020-1730"
},
{
"cve": "CVE-2021-3634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3634"
}
],
"notes": [
{
"category": "general",
"text": "A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating \"secret_hash\" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3634",
"url": "https://www.suse.com/security/cve/CVE-2021-3634"
},
{
"category": "external",
"summary": "SUSE Bug 1189608 for CVE-2021-3634",
"url": "https://bugzilla.suse.com/1189608"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3634",
"url": "https://bugzilla.suse.com/1194948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "low"
}
],
"title": "CVE-2021-3634"
},
{
"cve": "CVE-2023-1667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1667"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1667",
"url": "https://www.suse.com/security/cve/CVE-2023-1667"
},
{
"category": "external",
"summary": "SUSE Bug 1211188 for CVE-2023-1667",
"url": "https://bugzilla.suse.com/1211188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2023-1667"
},
{
"cve": "CVE-2023-2283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2283"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2283",
"url": "https://www.suse.com/security/cve/CVE-2023-2283"
},
{
"category": "external",
"summary": "SUSE Bug 1211190 for CVE-2023-2283",
"url": "https://bugzilla.suse.com/1211190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2023-2283"
},
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
},
{
"cve": "CVE-2023-6004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6004"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6004",
"url": "https://www.suse.com/security/cve/CVE-2023-6004"
},
{
"category": "external",
"summary": "SUSE Bug 1218209 for CVE-2023-6004",
"url": "https://bugzilla.suse.com/1218209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2023-6004"
},
{
"cve": "CVE-2023-6918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6918"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6918",
"url": "https://www.suse.com/security/cve/CVE-2023-6918"
},
{
"category": "external",
"summary": "SUSE Bug 1218186 for CVE-2023-6918",
"url": "https://bugzilla.suse.com/1218186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2023-6918"
}
]
}
SUSE-SU-2024:0539-1
Vulnerability from csaf_suse - Published: 2024-02-20 15:03 - Updated: 2024-02-20 15:03Summary
Security update for libssh
Severity
Important
Notes
Title of the patch: Security update for libssh
Description of the patch: This update for libssh fixes the following issues:
Update to version 0.9.8 (jsc#PED-7719):
* Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
* Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
* Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
* Allow @ in usernames when parsing from URI composes
Update to version 0.9.7
* Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
guessing (bsc#1211188)
* Fix CVE-2023-2283: a possible authorization bypass in
pki_verify_data_signature under low-memory conditions (bsc#1211190)
* Fix several memory leaks in GSSAPI handling code
Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6
Update to version 0.9.5 (bsc#1174713, CVE-2020-16135):
* CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
* Improve handling of library initialization (T222)
* Fix parsing of subsecond times in SFTP (T219)
* Make the documentation reproducible
* Remove deprecated API usage in OpenSSL
* Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
* Define version in one place (T226)
* Prevent invalid free when using different C runtimes than OpenSSL (T229)
* Compatibility improvements to testsuite
Update to version 0.9.4:
* https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
* Fix possible Denial of Service attack when using AES-CTR-ciphers
CVE-2020-1730 (bsc#1168699)
Update to version 0.9.3:
* Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
* SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
* SSH-01-006 General: Various unchecked Null-derefs cause DOS
* SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
* SSH-01-010 SSH: Deprecated hash function in fingerprinting
* SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
* SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
* SSH-01-001 State Machine: Initial machine states should be set explicitly
* SSH-01-002 Kex: Differently bound macros used to iterate same array
* SSH-01-005 Code-Quality: Integer sign confusion during assignments
* SSH-01-008 SCP: Protocol Injection via unescaped File Names
* SSH-01-009 SSH: Update documentation which RFCs are implemented
* SSH-01-012 PKI: Information leak via uninitialized stack buffer
Update to version 0.9.2:
* Fixed libssh-config.cmake
* Fixed issues with rsa algorithm negotiation (T191)
* Fixed detection of OpenSSL ed25519 support (T197)
Update to version 0.9.1:
* Added support for Ed25519 via OpenSSL
* Added support for X25519 via OpenSSL
* Added support for localuser in Match keyword
* Fixed Match keyword to be case sensitive
* Fixed compilation with LibreSSL
* Fixed error report of channel open (T75)
* Fixed sftp documentation (T137)
* Fixed known_hosts parsing (T156)
* Fixed build issue with MinGW (T157)
* Fixed build with gcc 9 (T164)
* Fixed deprecation issues (T165)
* Fixed known_hosts directory creation (T166)
Update to verion 0.9.0:
* Added support for AES-GCM
* Added improved rekeying support
* Added performance improvements
* Disabled blowfish support by default
* Fixed several ssh config parsing issues
* Added support for DH Group Exchange KEX
* Added support for Encrypt-then-MAC mode
* Added support for parsing server side configuration file
* Added support for ECDSA/Ed25519 certificates
* Added FIPS 140-2 compatibility
* Improved known_hosts parsing
* Improved documentation
* Improved OpenSSL API usage for KEX, DH, and signatures
- Add libssh client and server config files
Patchnames: SUSE-2024-539,SUSE-SLE-SDK-12-SP5-2024-539,SUSE-SLE-SERVER-12-SP5-2024-539
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.8 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
43 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libssh fixes the following issues:\n\nUpdate to version 0.9.8 (jsc#PED-7719):\n\n* Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)\n* Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)\n* Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)\n* Allow @ in usernames when parsing from URI composes\n\nUpdate to version 0.9.7\n\n* Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm\n guessing (bsc#1211188)\n* Fix CVE-2023-2283: a possible authorization bypass in\n pki_verify_data_signature under low-memory conditions (bsc#1211190)\n* Fix several memory leaks in GSSAPI handling code\n\nUpdate to version 0.9.6 (bsc#1189608, CVE-2021-3634)\n\n* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6\n\nUpdate to version 0.9.5 (bsc#1174713, CVE-2020-16135):\n\n* CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)\n* Improve handling of library initialization (T222)\n* Fix parsing of subsecond times in SFTP (T219)\n* Make the documentation reproducible\n* Remove deprecated API usage in OpenSSL\n* Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN\n* Define version in one place (T226)\n* Prevent invalid free when using different C runtimes than OpenSSL (T229)\n* Compatibility improvements to testsuite \n\nUpdate to version 0.9.4:\n\n* https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/\n* Fix possible Denial of Service attack when using AES-CTR-ciphers\n CVE-2020-1730 (bsc#1168699)\n\nUpdate to version 0.9.3:\n\n* Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)\n* SSH-01-003 Client: Missing NULL check leads to crash in erroneous state\n* SSH-01-006 General: Various unchecked Null-derefs cause DOS\n* SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys\n* SSH-01-010 SSH: Deprecated hash function in fingerprinting\n* SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS\n* SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access\n* SSH-01-001 State Machine: Initial machine states should be set explicitly\n* SSH-01-002 Kex: Differently bound macros used to iterate same array\n* SSH-01-005 Code-Quality: Integer sign confusion during assignments\n* SSH-01-008 SCP: Protocol Injection via unescaped File Names\n* SSH-01-009 SSH: Update documentation which RFCs are implemented\n* SSH-01-012 PKI: Information leak via uninitialized stack buffer\n\nUpdate to version 0.9.2:\n\n* Fixed libssh-config.cmake\n* Fixed issues with rsa algorithm negotiation (T191)\n* Fixed detection of OpenSSL ed25519 support (T197)\n\nUpdate to version 0.9.1:\n\n* Added support for Ed25519 via OpenSSL\n* Added support for X25519 via OpenSSL\n* Added support for localuser in Match keyword\n* Fixed Match keyword to be case sensitive\n* Fixed compilation with LibreSSL\n* Fixed error report of channel open (T75)\n* Fixed sftp documentation (T137)\n* Fixed known_hosts parsing (T156)\n* Fixed build issue with MinGW (T157)\n* Fixed build with gcc 9 (T164)\n* Fixed deprecation issues (T165)\n* Fixed known_hosts directory creation (T166)\n\nUpdate to verion 0.9.0:\n\n* Added support for AES-GCM\n* Added improved rekeying support\n* Added performance improvements\n* Disabled blowfish support by default\n* Fixed several ssh config parsing issues\n* Added support for DH Group Exchange KEX\n* Added support for Encrypt-then-MAC mode\n* Added support for parsing server side configuration file\n* Added support for ECDSA/Ed25519 certificates\n* Added FIPS 140-2 compatibility\n* Improved known_hosts parsing\n* Improved documentation\n* Improved OpenSSL API usage for KEX, DH, and signatures\n\n- Add libssh client and server config files\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-539,SUSE-SLE-SDK-12-SP5-2024-539,SUSE-SLE-SERVER-12-SP5-2024-539",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0539-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0539-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240539-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0539-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017974.html"
},
{
"category": "self",
"summary": "SUSE Bug 1158095",
"url": "https://bugzilla.suse.com/1158095"
},
{
"category": "self",
"summary": "SUSE Bug 1168699",
"url": "https://bugzilla.suse.com/1168699"
},
{
"category": "self",
"summary": "SUSE Bug 1174713",
"url": "https://bugzilla.suse.com/1174713"
},
{
"category": "self",
"summary": "SUSE Bug 1189608",
"url": "https://bugzilla.suse.com/1189608"
},
{
"category": "self",
"summary": "SUSE Bug 1211188",
"url": "https://bugzilla.suse.com/1211188"
},
{
"category": "self",
"summary": "SUSE Bug 1211190",
"url": "https://bugzilla.suse.com/1211190"
},
{
"category": "self",
"summary": "SUSE Bug 1218126",
"url": "https://bugzilla.suse.com/1218126"
},
{
"category": "self",
"summary": "SUSE Bug 1218186",
"url": "https://bugzilla.suse.com/1218186"
},
{
"category": "self",
"summary": "SUSE Bug 1218209",
"url": "https://bugzilla.suse.com/1218209"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14889 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16135 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-1730 page",
"url": "https://www.suse.com/security/cve/CVE-2020-1730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3634 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1667 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2283 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6004 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6918 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6918/"
}
],
"title": "Security update for libssh",
"tracking": {
"current_release_date": "2024-02-20T15:03:55Z",
"generator": {
"date": "2024-02-20T15:03:55Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0539-1",
"initial_release_date": "2024-02-20T15:03:55Z",
"revision_history": [
{
"date": "2024-02-20T15:03:55Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.aarch64",
"product": {
"name": "libssh-config-0.9.8-3.12.2.aarch64",
"product_id": "libssh-config-0.9.8-3.12.2.aarch64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.aarch64",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.aarch64",
"product_id": "libssh-devel-0.9.8-3.12.2.aarch64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.aarch64",
"product": {
"name": "libssh4-0.9.8-3.12.2.aarch64",
"product_id": "libssh4-0.9.8-3.12.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh4-64bit-0.9.8-3.12.2.aarch64_ilp32",
"product": {
"name": "libssh4-64bit-0.9.8-3.12.2.aarch64_ilp32",
"product_id": "libssh4-64bit-0.9.8-3.12.2.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.i586",
"product": {
"name": "libssh-config-0.9.8-3.12.2.i586",
"product_id": "libssh-config-0.9.8-3.12.2.i586"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.i586",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.i586",
"product_id": "libssh-devel-0.9.8-3.12.2.i586"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.i586",
"product": {
"name": "libssh4-0.9.8-3.12.2.i586",
"product_id": "libssh4-0.9.8-3.12.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.ppc64le",
"product": {
"name": "libssh-config-0.9.8-3.12.2.ppc64le",
"product_id": "libssh-config-0.9.8-3.12.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.ppc64le",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.ppc64le",
"product_id": "libssh-devel-0.9.8-3.12.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.ppc64le",
"product": {
"name": "libssh4-0.9.8-3.12.2.ppc64le",
"product_id": "libssh4-0.9.8-3.12.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.s390",
"product": {
"name": "libssh-config-0.9.8-3.12.2.s390",
"product_id": "libssh-config-0.9.8-3.12.2.s390"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.s390",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.s390",
"product_id": "libssh-devel-0.9.8-3.12.2.s390"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.s390",
"product": {
"name": "libssh4-0.9.8-3.12.2.s390",
"product_id": "libssh4-0.9.8-3.12.2.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.s390x",
"product": {
"name": "libssh-config-0.9.8-3.12.2.s390x",
"product_id": "libssh-config-0.9.8-3.12.2.s390x"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.s390x",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.s390x",
"product_id": "libssh-devel-0.9.8-3.12.2.s390x"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.s390x",
"product": {
"name": "libssh4-0.9.8-3.12.2.s390x",
"product_id": "libssh4-0.9.8-3.12.2.s390x"
}
},
{
"category": "product_version",
"name": "libssh4-32bit-0.9.8-3.12.2.s390x",
"product": {
"name": "libssh4-32bit-0.9.8-3.12.2.s390x",
"product_id": "libssh4-32bit-0.9.8-3.12.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.x86_64",
"product": {
"name": "libssh-config-0.9.8-3.12.2.x86_64",
"product_id": "libssh-config-0.9.8-3.12.2.x86_64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.x86_64",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.x86_64",
"product_id": "libssh-devel-0.9.8-3.12.2.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.x86_64",
"product": {
"name": "libssh4-0.9.8-3.12.2.x86_64",
"product_id": "libssh4-0.9.8-3.12.2.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-32bit-0.9.8-3.12.2.x86_64",
"product": {
"name": "libssh4-32bit-0.9.8-3.12.2.x86_64",
"product_id": "libssh4-32bit-0.9.8-3.12.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh-devel-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh-devel-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh-devel-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh4-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh4-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh-config-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh-config-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh-config-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh-config-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh4-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh4-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-32bit-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh-config-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh-config-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh-config-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh-config-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh4-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh4-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-32bit-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-14889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14889"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14889",
"url": "https://www.suse.com/security/cve/CVE-2019-14889"
},
{
"category": "external",
"summary": "SUSE Bug 1158095 for CVE-2019-14889",
"url": "https://bugzilla.suse.com/1158095"
},
{
"category": "external",
"summary": "SUSE Bug 1224871 for CVE-2019-14889",
"url": "https://bugzilla.suse.com/1224871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "important"
}
],
"title": "CVE-2019-14889"
},
{
"cve": "CVE-2020-16135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16135"
}
],
"notes": [
{
"category": "general",
"text": "libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16135",
"url": "https://www.suse.com/security/cve/CVE-2020-16135"
},
{
"category": "external",
"summary": "SUSE Bug 1174713 for CVE-2020-16135",
"url": "https://bugzilla.suse.com/1174713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2020-16135"
},
{
"cve": "CVE-2020-1730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-1730"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn\u0027t been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-1730",
"url": "https://www.suse.com/security/cve/CVE-2020-1730"
},
{
"category": "external",
"summary": "SUSE Bug 1168699 for CVE-2020-1730",
"url": "https://bugzilla.suse.com/1168699"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2020-1730"
},
{
"cve": "CVE-2021-3634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3634"
}
],
"notes": [
{
"category": "general",
"text": "A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating \"secret_hash\" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3634",
"url": "https://www.suse.com/security/cve/CVE-2021-3634"
},
{
"category": "external",
"summary": "SUSE Bug 1189608 for CVE-2021-3634",
"url": "https://bugzilla.suse.com/1189608"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3634",
"url": "https://bugzilla.suse.com/1194948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "low"
}
],
"title": "CVE-2021-3634"
},
{
"cve": "CVE-2023-1667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1667"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1667",
"url": "https://www.suse.com/security/cve/CVE-2023-1667"
},
{
"category": "external",
"summary": "SUSE Bug 1211188 for CVE-2023-1667",
"url": "https://bugzilla.suse.com/1211188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2023-1667"
},
{
"cve": "CVE-2023-2283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2283"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2283",
"url": "https://www.suse.com/security/cve/CVE-2023-2283"
},
{
"category": "external",
"summary": "SUSE Bug 1211190 for CVE-2023-2283",
"url": "https://bugzilla.suse.com/1211190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2023-2283"
},
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
},
{
"cve": "CVE-2023-6004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6004"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6004",
"url": "https://www.suse.com/security/cve/CVE-2023-6004"
},
{
"category": "external",
"summary": "SUSE Bug 1218209 for CVE-2023-6004",
"url": "https://bugzilla.suse.com/1218209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2023-6004"
},
{
"cve": "CVE-2023-6918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6918"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6918",
"url": "https://www.suse.com/security/cve/CVE-2023-6918"
},
{
"category": "external",
"summary": "SUSE Bug 1218186 for CVE-2023-6918",
"url": "https://bugzilla.suse.com/1218186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2023-6918"
}
]
}
SUSE-SU-2024:0543-1
Vulnerability from csaf_suse - Published: 2024-02-20 15:04 - Updated: 2024-02-20 15:04Summary
Security update for libssh2_org
Severity
Important
Notes
Title of the patch: Security update for libssh2_org
Description of the patch: This update for libssh2_org fixes the following issues:
- Always add the KEX pseudo-methods 'ext-info-c' and 'kex-strict-c-v00@openssh.com'
when configuring custom method list. [bsc#1218971, CVE-2023-48795]
* The strict-kex extension is announced in the list of available
KEX methods. However, when the default KEX method list is modified
or replaced, the extension is not added back automatically.
Patchnames: SUSE-2024-543,SUSE-SLE-SDK-12-SP5-2024-543,SUSE-SLE-SERVER-12-SP5-2024-543
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libssh2_org",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libssh2_org fixes the following issues:\n\n- Always add the KEX pseudo-methods \u0027ext-info-c\u0027 and \u0027kex-strict-c-v00@openssh.com\u0027\n when configuring custom method list. [bsc#1218971, CVE-2023-48795]\n\n * The strict-kex extension is announced in the list of available\n KEX methods. However, when the default KEX method list is modified\n or replaced, the extension is not added back automatically.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-543,SUSE-SLE-SDK-12-SP5-2024-543,SUSE-SLE-SERVER-12-SP5-2024-543",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0543-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0543-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240543-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0543-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017959.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218971",
"url": "https://bugzilla.suse.com/1218971"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for libssh2_org",
"tracking": {
"current_release_date": "2024-02-20T15:04:50Z",
"generator": {
"date": "2024-02-20T15:04:50Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0543-1",
"initial_release_date": "2024-02-20T15:04:50Z",
"revision_history": [
{
"date": "2024-02-20T15:04:50Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.aarch64",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.aarch64",
"product_id": "libssh2-1-1.11.0-29.12.1.aarch64"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.aarch64",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.aarch64",
"product_id": "libssh2-devel-1.11.0-29.12.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-64bit-1.11.0-29.12.1.aarch64_ilp32",
"product": {
"name": "libssh2-1-64bit-1.11.0-29.12.1.aarch64_ilp32",
"product_id": "libssh2-1-64bit-1.11.0-29.12.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.i586",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.i586",
"product_id": "libssh2-1-1.11.0-29.12.1.i586"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.i586",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.i586",
"product_id": "libssh2-devel-1.11.0-29.12.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.ppc64le",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.ppc64le",
"product_id": "libssh2-1-1.11.0-29.12.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.ppc64le",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.ppc64le",
"product_id": "libssh2-devel-1.11.0-29.12.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.s390",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.s390",
"product_id": "libssh2-1-1.11.0-29.12.1.s390"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.s390",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.s390",
"product_id": "libssh2-devel-1.11.0-29.12.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.s390x",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.s390x",
"product_id": "libssh2-1-1.11.0-29.12.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh2-1-32bit-1.11.0-29.12.1.s390x",
"product": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.s390x",
"product_id": "libssh2-1-32bit-1.11.0-29.12.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.s390x",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.s390x",
"product_id": "libssh2-devel-1.11.0-29.12.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.x86_64",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.x86_64",
"product_id": "libssh2-1-1.11.0-29.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"product": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"product_id": "libssh2-1-32bit-1.11.0-29.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.x86_64",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.x86_64",
"product_id": "libssh2-devel-1.11.0-29.12.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-29.12.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-29.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-29.12.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-29.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-devel-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-1-32bit-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-1-32bit-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:04:50Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…