SUSE-SU-2024:0596-1: Security update for openssh
This update for openssh fixes the following issues: CVE-2023-51385: Limit the use of shell metacharacters in host- and user names to avoid command injection. (bsc#1218215)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/openssh-common-debuginfoto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-cavs-debuginfoto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-askpass-gnome-debugsourceto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-server-debuginfoto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-askpass-gnome-debuginfoto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-commonto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-fipsto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-debugsourceto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-helpers-debuginfoto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/opensshto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-cavsto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-clients-debuginfoto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-serverto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-askpass-gnometo a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-clientsto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-helpersto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
suse/openssh-debuginfoto a version that resolves this vulnerability.Fixed in 8.4p1-150300.3.30.1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Micro-5.3-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Micro-5.4-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Micro-5.5-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Module-Basesystem-15-SP5-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SUSE-MicroOS-5.1-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-SUSE-MicroOS-5.2-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch SUSE-Storage-7.1-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch openSUSE-Leap-Micro-5.3-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch openSUSE-Leap-Micro-5.4-2024-596=1 - Upgrade
Upgrade
opensshto a version that resolves this vulnerability.Patch openSUSE-SLE-15.5-2024-596=1