Announcement ID: | SUSE-SU-2023:2945-1 |
---|---|
Rating: | important |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves one vulnerability and has four fixes can now be installed.
This update for openssh fixes the following issues:
CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were present on the victim's system and if the agent was forwarded to an attacker-controlled system. [bsc#1213504, CVE-2023-38408]
Close the right filedescriptor and also close fdh in read_hmac to avoid file descriptor leaks. [bsc#1209536]
Attempts to mitigate instances of secrets lingering in memory after a session exits. [bsc#1186673, bsc#1213004, bsc#1213008]
To install this SUSE Important update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
zypper in -t patch openSUSE-Leap-Micro-5.3-2023-2945=1
zypper in -t patch openSUSE-SLE-15.4-2023-2945=1
zypper in -t patch openSUSE-SLE-15.5-2023-2945=1
zypper in -t patch SUSE-SLE-Micro-5.3-2023-2945=1
zypper in -t patch SUSE-SLE-Micro-5.3-2023-2945=1
zypper in -t patch SUSE-SLE-Micro-5.4-2023-2945=1
zypper in -t patch SUSE-SLE-Micro-5.4-2023-2945=1
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2945=1
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2945=1
zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-2945=1
zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-2945=1
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-2945=1
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-2945=1
zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-2945=1
zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-2945=1
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-2945=1
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-2945=1
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-2945=1
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-2945=1
zypper in -t patch SUSE-Storage-7.1-2023-2945=1
zypper in -t patch SUSE-SUSE-MicroOS-5.1-2023-2945=1
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2945=1
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-2945=1