SUSE-SU-2023:4902-1

UNKNOWN

Security update for openssh

Published Dec 19, 2023

Modified 2 years ago

Fix available

Details

This update for openssh fixes the following issues:

CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (bsc#1217950).

the following non-security bug was fixed:

Fix the 'no route to host' error when connecting via ProxyJump

Affected Packages

openssh

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Fixed in:

8.4p1-150300.3.27.1

openssh-askpass-gnome

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Fixed in:

8.4p1-150300.3.27.1

openssh-clients

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Fixed in:

8.4p1-150300.3.27.1

openssh-common

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Fixed in:

8.4p1-150300.3.27.1

openssh-fips

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Fixed in:

8.4p1-150300.3.27.1

openssh-helpers

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Fixed in:

8.4p1-150300.3.27.1

openssh-server

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Fixed in:

8.4p1-150300.3.27.1

openssh-cavs

openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

8.4p1-150300.3.27.1

References

https://bugzilla.suse.com/1214788

https://bugzilla.suse.com/1217950

https://www.suse.com/security/cve/CVE-2023-48795

https://www.suse.com/support/update/announcement/2023/suse-su-20234902-1/

Upstream

Related

Ecosystems(25)

SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Timeline

PublishedDec 19, 2023

ModifiedDec 19, 2023

SUSE-SU-2023:4902-1 | Mondoo Vulnerability Intelligence