SUSE-SU-2020:0130-1

Details

This update for libssh fixes the following issues:

CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location (bsc#1158095).

Affected Packages

libssh

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

0.7.5-6.9.2

libssh-devel

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

0.7.5-6.9.2

libssh4

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

0.7.5-6.9.2

libssh4-32bit

SUSE Linux Enterprise High Performance Computing 15-ESPOSSUSE Linux Enterprise High Performance Computing 15-LTSSSUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Server 15-LTSSSUSE Linux Enterprise Server for SAP Applications 15

Fixed in:

0.7.5-6.9.2

References

REPORT

https://bugzilla.suse.com/1158095

WEB

https://www.suse.com/security/cve/CVE-2019-14889

ADVISORY

https://www.suse.com/support/update/announcement/2020/suse-su-20200130-1/