SUSE-SU-2019:1606-1

LOW3.5

Security update for libssh2_org

Published Aug 21, 2019

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for libssh2_org fixes the following issues:

Fix the previous fix for CVE-2019-3860 (bsc#1136570, bsc#1128481) (Out-of-bounds reads with specially crafted SFTP packets)

Affected Packages

libssh2-1

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP1

Fixed in:

1.4.3-20.9.1

libssh2-1-32bit

SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2

Fixed in:

1.4.3-20.9.1

libssh2-devel

SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Software Development Kit 12 SP3

Fixed in:

1.4.3-20.9.1

References

ADVISORY

https://bugzilla.suse.com/1128481

ADVISORY

https://bugzilla.suse.com/1136570

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-June/005608.html

ADVISORY

https://www.suse.com/security/cve/CVE-2019-3860/

WEB