suse-su-2016:1528-1
Vulnerability from csaf_suse
Published
2016-06-08 10:46
Modified
2016-06-08 10:46
Summary
Security update for openssh

Notes

Title of the patch
Security update for openssh
Description of the patch
openssh was updated to fix three security issues. These security issues were fixed: - CVE-2016-3115: Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH allowed remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions (bsc#970632). - CVE-2016-1908: Possible fallback from untrusted to trusted X11 forwarding (bsc#962313). - CVE-2015-8325: Ignore PAM environment vars when UseLogin=yes (bsc#975865). These non-security issues were fixed: - Correctly parse GSSAPI KEX algorithms (bsc#961368) - More verbose FIPS mode/CC related documentation in README.FIPS (bsc#965576, bsc#960414) - Fix PRNG re-seeding (bsc#960414, bsc#729190) - Disable DH parameters under 2048 bits by default and allow lowering the limit back to the RFC 4419 specified minimum through an option (bsc#932483, bsc#948902) - Allow empty Match blocks (bsc#961494)
Patchnames
slessp4-openssh-12603
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "openssh was updated to fix three security issues.\n\nThese security issues were fixed:\n- CVE-2016-3115: Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH allowed remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions  (bsc#970632).\n- CVE-2016-1908: Possible fallback from untrusted to trusted X11 forwarding (bsc#962313).\n- CVE-2015-8325: Ignore PAM environment vars when UseLogin=yes (bsc#975865).\n\nThese non-security issues were fixed:\n- Correctly parse GSSAPI KEX algorithms (bsc#961368)\n- More verbose FIPS mode/CC related documentation in README.FIPS (bsc#965576, bsc#960414)\n- Fix PRNG re-seeding (bsc#960414, bsc#729190)\n- Disable DH parameters under 2048 bits by default and allow lowering the limit back to the RFC 4419 specified minimum through an option (bsc#932483, bsc#948902)\n- Allow empty Match blocks (bsc#961494) \n  ",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "slessp4-openssh-12603",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1528-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:1528-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161528-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:1528-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-June/002103.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 729190",
        "url": "https://bugzilla.suse.com/729190"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 932483",
        "url": "https://bugzilla.suse.com/932483"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 948902",
        "url": "https://bugzilla.suse.com/948902"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 960414",
        "url": "https://bugzilla.suse.com/960414"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 961368",
        "url": "https://bugzilla.suse.com/961368"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 961494",
        "url": "https://bugzilla.suse.com/961494"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962313",
        "url": "https://bugzilla.suse.com/962313"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 965576",
        "url": "https://bugzilla.suse.com/965576"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 970632",
        "url": "https://bugzilla.suse.com/970632"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 975865",
        "url": "https://bugzilla.suse.com/975865"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8325 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8325/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1908 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1908/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3115 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3115/"
      }
    ],
    "title": "Security update for openssh",
    "tracking": {
      "current_release_date": "2016-06-08T10:46:21Z",
      "generator": {
        "date": "2016-06-08T10:46:21Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:1528-1",
      "initial_release_date": "2016-06-08T10:46:21Z",
      "revision_history": [
        {
          "date": "2016-06-08T10:46:21Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-6.6p1-21.1.i586",
                "product": {
                  "name": "openssh-6.6p1-21.1.i586",
                  "product_id": "openssh-6.6p1-21.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-gnome-6.6p1-21.3.i586",
                "product": {
                  "name": "openssh-askpass-gnome-6.6p1-21.3.i586",
                  "product_id": "openssh-askpass-gnome-6.6p1-21.3.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-fips-6.6p1-21.1.i586",
                "product": {
                  "name": "openssh-fips-6.6p1-21.1.i586",
                  "product_id": "openssh-fips-6.6p1-21.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-helpers-6.6p1-21.1.i586",
                "product": {
                  "name": "openssh-helpers-6.6p1-21.1.i586",
                  "product_id": "openssh-helpers-6.6p1-21.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-6.6p1-21.1.ia64",
                "product": {
                  "name": "openssh-6.6p1-21.1.ia64",
                  "product_id": "openssh-6.6p1-21.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-gnome-6.6p1-21.3.ia64",
                "product": {
                  "name": "openssh-askpass-gnome-6.6p1-21.3.ia64",
                  "product_id": "openssh-askpass-gnome-6.6p1-21.3.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-fips-6.6p1-21.1.ia64",
                "product": {
                  "name": "openssh-fips-6.6p1-21.1.ia64",
                  "product_id": "openssh-fips-6.6p1-21.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-helpers-6.6p1-21.1.ia64",
                "product": {
                  "name": "openssh-helpers-6.6p1-21.1.ia64",
                  "product_id": "openssh-helpers-6.6p1-21.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-6.6p1-21.1.ppc64",
                "product": {
                  "name": "openssh-6.6p1-21.1.ppc64",
                  "product_id": "openssh-6.6p1-21.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-gnome-6.6p1-21.3.ppc64",
                "product": {
                  "name": "openssh-askpass-gnome-6.6p1-21.3.ppc64",
                  "product_id": "openssh-askpass-gnome-6.6p1-21.3.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-fips-6.6p1-21.1.ppc64",
                "product": {
                  "name": "openssh-fips-6.6p1-21.1.ppc64",
                  "product_id": "openssh-fips-6.6p1-21.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-helpers-6.6p1-21.1.ppc64",
                "product": {
                  "name": "openssh-helpers-6.6p1-21.1.ppc64",
                  "product_id": "openssh-helpers-6.6p1-21.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-6.6p1-21.1.s390x",
                "product": {
                  "name": "openssh-6.6p1-21.1.s390x",
                  "product_id": "openssh-6.6p1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-gnome-6.6p1-21.3.s390x",
                "product": {
                  "name": "openssh-askpass-gnome-6.6p1-21.3.s390x",
                  "product_id": "openssh-askpass-gnome-6.6p1-21.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-fips-6.6p1-21.1.s390x",
                "product": {
                  "name": "openssh-fips-6.6p1-21.1.s390x",
                  "product_id": "openssh-fips-6.6p1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-helpers-6.6p1-21.1.s390x",
                "product": {
                  "name": "openssh-helpers-6.6p1-21.1.s390x",
                  "product_id": "openssh-helpers-6.6p1-21.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-6.6p1-21.1.x86_64",
                "product": {
                  "name": "openssh-6.6p1-21.1.x86_64",
                  "product_id": "openssh-6.6p1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-gnome-6.6p1-21.3.x86_64",
                "product": {
                  "name": "openssh-askpass-gnome-6.6p1-21.3.x86_64",
                  "product_id": "openssh-askpass-gnome-6.6p1-21.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-fips-6.6p1-21.1.x86_64",
                "product": {
                  "name": "openssh-fips-6.6p1-21.1.x86_64",
                  "product_id": "openssh-fips-6.6p1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssh-helpers-6.6p1-21.1.x86_64",
                "product": {
                  "name": "openssh-helpers-6.6p1-21.1.x86_64",
                  "product_id": "openssh-helpers-6.6p1-21.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586"
        },
        "product_reference": "openssh-6.6p1-21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64"
        },
        "product_reference": "openssh-6.6p1-21.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64"
        },
        "product_reference": "openssh-6.6p1-21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x"
        },
        "product_reference": "openssh-6.6p1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64"
        },
        "product_reference": "openssh-6.6p1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586"
        },
        "product_reference": "openssh-6.6p1-21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64"
        },
        "product_reference": "openssh-6.6p1-21.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64"
        },
        "product_reference": "openssh-6.6p1-21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x"
        },
        "product_reference": "openssh-6.6p1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-6.6p1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64"
        },
        "product_reference": "openssh-6.6p1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-gnome-6.6p1-21.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64"
        },
        "product_reference": "openssh-askpass-gnome-6.6p1-21.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-fips-6.6p1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64"
        },
        "product_reference": "openssh-fips-6.6p1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-helpers-6.6p1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
        },
        "product_reference": "openssh-helpers-6.6p1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-8325",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8325"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8325",
          "url": "https://www.suse.com/security/cve/CVE-2015-8325"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2015-8325",
          "url": "https://bugzilla.suse.com/1138392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 975865 for CVE-2015-8325",
          "url": "https://bugzilla.suse.com/975865"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996040 for CVE-2015-8325",
          "url": "https://bugzilla.suse.com/996040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-08T10:46:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8325"
    },
    {
      "cve": "CVE-2016-1908",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1908"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1908",
          "url": "https://www.suse.com/security/cve/CVE-2016-1908"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1001712 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/1001712"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005738 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/1005738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010950 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/1010950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/1138392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962313 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/962313"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996040 for CVE-2016-1908",
          "url": "https://bugzilla.suse.com/996040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-08T10:46:21Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-1908"
    },
    {
      "cve": "CVE-2016-3115",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3115"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3115",
          "url": "https://www.suse.com/security/cve/CVE-2016-3115"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005738 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/1005738"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010950 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/1010950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1059233 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/1059233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1138392 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/1138392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 970632 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/970632"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992296 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/992296"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/992991"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996040 for CVE-2016-3115",
          "url": "https://bugzilla.suse.com/996040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-21.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-06-08T10:46:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-3115"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.