{"affected":[{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12","name":"openssh","purl":"pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Desktop%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12","name":"openssh-askpass-gnome","purl":"pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Desktop%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","name":"openssh","purl":"pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","name":"openssh-askpass-gnome","purl":"pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-fips":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12","name":"openssh","purl":"pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-fips":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12","name":"openssh-askpass-gnome","purl":"pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-fips":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","name":"openssh","purl":"pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-fips":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","name":"openssh-askpass-gnome","purl":"pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-fips":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","name":"openssh","purl":"pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-fips":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","name":"openssh-askpass-gnome","purl":"pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-fips":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","name":"openssh","purl":"pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"openssh":"6.6p1-42.1","openssh-askpass-gnome":"6.6p1-42.1","openssh-fips":"6.6p1-42.1","openssh-helpers":"6.6p1-42.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","name":"openssh-askpass-gnome","purl":"pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"6.6p1-42.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for OpenSSH fixes three security issues.\n\nThese security issues were fixed:\n- CVE-2016-3115: Sanitise input for xauth(1) (bsc#970632)\n- CVE-2016-1908: Prevent X11 SECURITY circumvention when forwarding X11 connections (bsc#962313)\n- CVE-2015-8325: Ignore PAM environment when using login (bsc#975865)\n\nThese non-security issues were fixed:\n- Fix help output of sftp (bsc#945493)\n- Restarting openssh with openssh-fips installed was not working correctly (bsc#945484)\n- Fix crashes when /proc is not available in the chroot (bsc#947458)\n- Correctly parse GSSAPI KEX algorithms (bsc#961368)\n- More verbose FIPS mode/CC related documentation in README.FIPS (bsc#965576, bsc#960414)\n- Fix PRNG re-seeding (bsc#960414, bsc#729190)\n- Disable DH parameters under 2048 bits by default and allow lowering the limit back to the RFC 4419 specified minimum through an option (bsc#932483, bsc#948902)\n","id":"SUSE-SU-2016:1386-1","modified":"2016-05-23T15:04:45Z","published":"2016-05-23T15:04:45Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161386-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/729190"},{"type":"REPORT","url":"https://bugzilla.suse.com/932483"},{"type":"REPORT","url":"https://bugzilla.suse.com/945484"},{"type":"REPORT","url":"https://bugzilla.suse.com/945493"},{"type":"REPORT","url":"https://bugzilla.suse.com/947458"},{"type":"REPORT","url":"https://bugzilla.suse.com/948902"},{"type":"REPORT","url":"https://bugzilla.suse.com/960414"},{"type":"REPORT","url":"https://bugzilla.suse.com/961368"},{"type":"REPORT","url":"https://bugzilla.suse.com/962313"},{"type":"REPORT","url":"https://bugzilla.suse.com/965576"},{"type":"REPORT","url":"https://bugzilla.suse.com/970632"},{"type":"REPORT","url":"https://bugzilla.suse.com/975865"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-8325"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-1908"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-3115"}],"related":["CVE-2015-8325","CVE-2016-1908","CVE-2016-3115"],"summary":"Security update for openssh","upstream":["CVE-2015-8325","CVE-2016-1908","CVE-2016-3115"]}