Bugs fixes in "openssh"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2018-15473 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packe | 2018-11-06 |
| Launchpad | 1794629 | CVE-2018-15473 - User enumeration vulnerability | 2018-11-06 |
| CVE | CVE-2018-15473 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packe | 2018-11-06 |
| Launchpad | 1794629 | CVE-2018-15473 - User enumeration vulnerability | 2018-11-06 |
| CVE | CVE-2018-15473 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packe | 2018-11-06 |
| Launchpad | 1794629 | CVE-2018-15473 - User enumeration vulnerability | 2018-11-06 |
| Launchpad | 1771340 | sshd failed on config reload | 2018-10-17 |
| Launchpad | 1771340 | sshd failed on config reload | 2018-10-17 |
| Launchpad | 1771340 | sshd failed on config reload | 2018-09-07 |
| Launchpad | 1771340 | sshd failed on config reload | 2018-09-07 |
| CVE | CVE-2017-15906 | The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers | 2018-01-22 |
| CVE | CVE-2016-10012 | The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enfor | 2018-01-22 |
| CVE | CVE-2016-10011 | authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtai | 2018-01-22 |
| CVE | CVE-2016-10010 | sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to ga | 2018-01-22 |
| CVE | CVE-2016-10009 | Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modu | 2018-01-22 |
| CVE | CVE-2017-15906 | The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers | 2018-01-22 |
| CVE | CVE-2016-10012 | The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enfor | 2018-01-22 |
| CVE | CVE-2016-10011 | authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtai | 2018-01-22 |
| CVE | CVE-2016-10010 | sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to ga | 2018-01-22 |
| CVE | CVE-2016-10009 | Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modu | 2018-01-22 |
About
-
Send Feedback to @ubuntu_updates
