SUSE-SU-2024:0604-1: Security update for openssh

Q: What attacker-controlled input is relevant to exploitation?

The issue involves command injection through metacharacters in a user name or host name. Exploitation therefore depends on an attacker being able to influence one of those values in an affected OpenSSH use case.

Q: Which SUSE packages are covered by this update?

The update covers suse/openssh, suse/openssh-fips, suse/openssh-askpass-gnome, suse/openssh-askpass-gnome-debuginfo, suse/openssh-helpers-debuginfo, suse/openssh-helpers, suse/openssh-debuginfo, and suse/openssh-debugsource.

Q: Will updating disrupt the current sshd service state?

The update records the sshd service state during update or removal so that a cut-over to a different OpenSSH package is possible. The provided information does not state whether sshd is restarted or otherwise interrupted during installation.

Published Feb 23, 2024

Updated

This update for openssh fixes the following issues: CVE-2023-51385: Fixed a command injection via user name or host name metacharacters (bsc#1218215).

Remember the state of sshd service during update / removal, to allow cut-over to a different openssh package. bsc#1220110

Affected Software

29 affected componentsFixes available

All of the following

SUSE SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64)

suse/openssh-testuser<0-81.12.1

0-81.12.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)

Any of the following

suse/openssh<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-fips<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-askpass-gnome<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-askpass-gnome-debuginfo<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-helpers-debuginfo<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-helpers<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-debuginfo<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-debugsource<7.2p2-81.12.1

7.2p2-81.12.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/openssh<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-fips<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-askpass-gnome<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-askpass-gnome-debuginfo<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-helpers-debuginfo<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-helpers<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-debuginfo<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-debugsource<7.2p2-81.12.1

7.2p2-81.12.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)

Any of the following

suse/openssh<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-fips<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-askpass-gnome<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-askpass-gnome-debuginfo<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-helpers-debuginfo<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-helpers<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-debuginfo<7.2p2-81.12.1

7.2p2-81.12.1

suse/openssh-debugsource<7.2p2-81.12.1

7.2p2-81.12.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/openssh-testuser to a version that resolves this vulnerability.
Fixed in 0-81.12.1
Upgrade
Upgrade suse/openssh to a version that resolves this vulnerability.
Fixed in 7.2p2-81.12.1
Upgrade
Upgrade suse/openssh-fips to a version that resolves this vulnerability.
Fixed in 7.2p2-81.12.1
Upgrade
Upgrade suse/openssh-askpass-gnome to a version that resolves this vulnerability.
Fixed in 7.2p2-81.12.1
Upgrade
Upgrade suse/openssh-askpass-gnome-debuginfo to a version that resolves this vulnerability.
Fixed in 7.2p2-81.12.1
Upgrade
Upgrade suse/openssh-helpers-debuginfo to a version that resolves this vulnerability.
Fixed in 7.2p2-81.12.1
Upgrade
Upgrade suse/openssh-helpers to a version that resolves this vulnerability.
Fixed in 7.2p2-81.12.1
Upgrade
Upgrade suse/openssh-debuginfo to a version that resolves this vulnerability.
Fixed in 7.2p2-81.12.1
Upgrade
Upgrade suse/openssh-debugsource to a version that resolves this vulnerability.
Fixed in 7.2p2-81.12.1
Upgrade
Upgrade openssh to a version that resolves this vulnerability.
Patch SUSE-SLE-SDK-12-SP5-2024-604=1
Upgrade
Upgrade openssh to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-2024-604=1
Operational
Preserve the current state of the sshd service during the update or removal so cut-over to a different OpenSSH package is possible.

Event History

Feb 23, 2024

Advisory Published

via SUSE·12:30 PM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-51385

Frequently Asked Questions

What attacker-controlled input is relevant to exploitation?

The issue involves command injection through metacharacters in a user name or host name. Exploitation therefore depends on an attacker being able to influence one of those values in an affected OpenSSH use case.

Which SUSE packages are covered by this update?

The update covers suse/openssh, suse/openssh-fips, suse/openssh-askpass-gnome, suse/openssh-askpass-gnome-debuginfo, suse/openssh-helpers-debuginfo, suse/openssh-helpers, suse/openssh-debuginfo, and suse/openssh-debugsource.

Will updating disrupt the current sshd service state?

The update records the sshd service state during update or removal so that a cut-over to a different OpenSSH package is possible. The provided information does not state whether sshd is restarted or otherwise interrupted during installation.

SUSE-SU-2024:0604-1: Security update for openssh

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What attacker-controlled input is relevant to exploitation?

Which SUSE packages are covered by this update?

Will updating disrupt the current sshd service state?

Company

Resources

Contact

Frequently Asked Questions

What attacker-controlled input is relevant to exploitation?

Which SUSE packages are covered by this update?

Will updating disrupt the current sshd service state?