crítica
openSUSE-SU-2016:0128-1
Security update for openssh
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for openssh fixes the following issues: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malicious or compromised server could could trigger a buffer overflow in the OpenSSH client through the roaming feature (bsc#961645) This update disables the undocumented feature supported by the OpenSSH client and a commercial SSH server. This update was imported from the SUSE:SLE-12:Update update project.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 42.1 | openssh, openssh-askpass-gnome, openssh-cavs y 2 más | 6.6p1-8.1 |
Mostrar las 5 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 42.1 | openssh | 6.6p1-8.1 |
| openSUSE Leap 42.1 | openssh-askpass-gnome | 6.6p1-8.1 |
| openSUSE Leap 42.1 | openssh-cavs | 6.6p1-8.1 |
| openSUSE Leap 42.1 | openssh-fips | 6.6p1-8.1 |
| openSUSE Leap 42.1 | openssh-helpers | 6.6p1-8.1 |