Security update for libssh SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:0967-1 Final 1 1 2020-04-09T09:41:56Z current 2020-04-09T09:41:56Z 2020-04-09T09:41:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libssh This update for libssh fixes the following issues: - CVE-2020-1730: Fixed a possible denial of service when using AES-CTR (bsc#1168699). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-init:15.3-2020-967,Container bci/dotnet-aspnet:3.1-2020-967,Container bci/dotnet-aspnet:5.0-2020-967,Container bci/dotnet-aspnet:latest-2020-967,Container bci/dotnet-runtime:3.1-2020-967,Container bci/dotnet-runtime:5.0-2020-967,Container bci/dotnet-runtime:latest-2020-967,Container bci/dotnet-sdk:3.1-2020-967,Container bci/dotnet-sdk:5.0-2020-967,Container bci/dotnet-sdk:latest-2020-967,Container bci/golang:1.16-2020-967,Container bci/golang:1.17-2020-967,Container bci/golang:latest-2020-967,Container bci/node:12-2020-967,Container bci/node:14-2020-967,Container bci/nodejs:latest-2020-967,Container bci/openjdk-devel:11-2020-967,Container bci/openjdk:latest-2020-967,Container bci/python:3-2020-967,Container bci/ruby:latest-2020-967,Container caasp/v4/389-ds:1.4.2-2020-967,Container caasp/v4/busybox:1.34.1-2020-967,Container caasp/v4/caasp-dex:2.16.0-2020-967,Container caasp/v4/cert-exporter:2.3.0-2020-967,Container caasp/v4/cilium-etcd-operator:2.0.5-2020-967,Container caasp/v4/cilium-init:1.5.3-2020-967,Container caasp/v4/cilium-operator:1.6.6-2020-967,Container caasp/v4/cilium:1.6.6-2020-967,Container caasp/v4/cloud-provider-openstack:1.15.0-2020-967,Container caasp/v4/configmap-reload:0.3.0-2020-967,Container caasp/v4/coredns:1.6.7-2020-967,Container caasp/v4/curl:7.60.0-2020-967,Container caasp/v4/etcd:3.4.13-2020-967,Container caasp/v4/gangway:3.1.0-2020-967,Container caasp/v4/grafana:7.5.12-2020-967,Container caasp/v4/helm-tiller:2.16.12-2020-967,Container caasp/v4/hyperkube:v1.17.17-2020-967,Container caasp/v4/k8s-sidecar:0.1.75-2020-967,Container caasp/v4/kube-state-metrics:1.9.3-2020-967,Container caasp/v4/kubernetes-client:1.17.17-2020-967,Container caasp/v4/kucero:1.3.0-2020-967,Container caasp/v4/kured:1.3.0-2020-967,Container caasp/v4/metrics-server:0.3.6-2020-967,Container caasp/v4/prometheus-alertmanager:0.16.2-2020-967,Container caasp/v4/prometheus-node-exporter:1.1.2-2020-967,Container caasp/v4/prometheus-pushgateway:0.6.0-2020-967,Container caasp/v4/prometheus-server:2.7.1-2020-967,Container caasp/v4/rsyslog:8.39.0-2020-967,Container caasp/v4/skuba-tooling:0.1.0-2020-967,Container caasp/v4/test-update:beta-2020-967,Container caasp/v4/velero-plugin-for-aws:1.0.1-2020-967,Container caasp/v4/velero-plugin-for-gcp:1.0.1-2020-967,Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1-2020-967,Container caasp/v4/velero-restic-restore-helper:1.3.1-2020-967,Container caasp/v4/velero:1.3.1-2020-967,Container ses/6/cephcsi/cephcsi:latest-2020-967,Container ses/6/rook/ceph:latest-2020-967,Container ses/7.1/ceph/grafana:latest-2020-967,Container ses/7.1/ceph/haproxy:latest-2020-967,Container ses/7.1/ceph/keepalived:latest-2020-967,Container ses/7.1/ceph/prometheus-alertmanager:latest-2020-967,Container ses/7.1/ceph/prometheus-node-exporter:latest-2020-967,Container ses/7.1/ceph/prometheus-server:latest-2020-967,Container ses/7.1/ceph/prometheus-snmp_notifier:latest-2020-967,Container ses/7.1/cephcsi/cephcsi:latest-2020-967,Container ses/7.1/cephcsi/csi-attacher:v4.1.0-2020-967,Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0-2020-967,Container ses/7.1/cephcsi/csi-provisioner:v3.4.0-2020-967,Container ses/7.1/cephcsi/csi-resizer:v1.7.0-2020-967,Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1-2020-967,Container ses/7.1/rook/ceph:latest-2020-967,Container ses/7/ceph/ceph:latest-2020-967,Container ses/7/ceph/grafana:latest-2020-967,Container ses/7/ceph/prometheus-alertmanager:latest-2020-967,Container ses/7/ceph/prometheus-node-exporter:latest-2020-967,Container ses/7/ceph/prometheus-server:latest-2020-967,Container ses/7/cephcsi/cephcsi:latest-2020-967,Container ses/7/cephcsi/csi-attacher:v2.1.0-2020-967,Container ses/7/cephcsi/csi-attacher:v3.3.0-2020-967,Container ses/7/cephcsi/csi-livenessprobe:v1.1.0-2020-967,Container ses/7/cephcsi/csi-node-driver-registrar:v1.2.0-2020-967,Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0-2020-967,Container ses/7/cephcsi/csi-provisioner:v1.6.0-2020-967,Container ses/7/cephcsi/csi-provisioner:v3.0.0-2020-967,Container ses/7/cephcsi/csi-resizer:v0.4.0-2020-967,Container ses/7/cephcsi/csi-resizer:v1.3.0-2020-967,Container ses/7/cephcsi/csi-snapshotter:v2.1.0-2020-967,Container ses/7/cephcsi/csi-snapshotter:v2.1.1-2020-967,Container ses/7/cephcsi/csi-snapshotter:v4.2.0-2020-967,Container ses/7/prometheus-webhook-snmp:latest-2020-967,Container ses/7/rook/ceph:latest-2020-967,Container suse/pcp:latest-2020-967,Container suse/rmt-mariadb-client:latest-2020-967,Container suse/rmt-mariadb:latest-2020-967,Container suse/rmt-nginx:latest-2020-967,Container suse/rmt-server:latest-2020-967,Container suse/sle-micro/5.0/toolbox:latest-2020-967,Container suse/sle15:15.1-2020-967,Container suse/sle15:15.3-2020-967,Container suse/sles/15.2/virt-api:0.38.1-2020-967,Container suse/sles/15.2/virt-controller:0.38.1-2020-967,Container suse/sles/15.2/virt-handler:0.38.1-2020-967,Container suse/sles/15.2/virt-launcher:0.38.1-2020-967,Container suse/sles/15.2/virt-operator:0.38.1-2020-967,Container suse/sles/15.3/cdi-apiserver:1.37.1-2020-967,Container suse/sles/15.3/cdi-cloner:1.37.1-2020-967,Container suse/sles/15.3/cdi-controller:1.37.1-2020-967,Container suse/sles/15.3/cdi-importer:1.37.1-2020-967,Container suse/sles/15.3/cdi-operator:1.37.1-2020-967,Container suse/sles/15.3/cdi-uploadproxy:1.37.1-2020-967,Container suse/sles/15.3/cdi-uploadserver:1.37.1-2020-967,Container suse/sles/15.3/libguestfs-tools:0.45.0-2020-967,Container suse/sles/15.3/virt-api:0.45.0-2020-967,Container suse/sles/15.3/virt-controller:0.45.0-2020-967,Container suse/sles/15.3/virt-handler:0.45.0-2020-967,Container suse/sles/15.3/virt-launcher:0.45.0-2020-967,Container suse/sles/15.3/virt-operator:0.45.0-2020-967,Container trento/trento-db:latest-2020-967,Container trento/trento-runner:latest-2020-967,Image SLES15-SP3-EC2-ECS-HVM-2020-967,Image SLES15-SP3-EC2-HVM-2020-967,Image SLES15-SP3-GCE-2020-967,Image SLES15-SP3-HPC-Azure-2020-967,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2020-967,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2020-967,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2020-967,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2020-967,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2020-967,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2020-967,Image SLES15-SP3-Micro-BYOS-GCE-2020-967,Image SLES15-SP3-SAP-Azure-2020-967,Image SLES15-SP3-SAP-EC2-HVM-2020-967,Image SLES15-SP3-SAP-GCE-2020-967,SUSE-2020-967,SUSE-SLE-Module-Basesystem-15-SP1-2020-967,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-967 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20200967-1/ Link for SUSE-SU-2020:0967-1 https://lists.suse.com/pipermail/sle-security-updates/2020-April/006694.html E-Mail link for SUSE-SU-2020:0967-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1168699 SUSE Bug 1168699 https://www.suse.com/security/cve/CVE-2020-1730/ SUSE CVE CVE-2020-1730 page Container bci/bci-init:15.3 Container bci/dotnet-aspnet:3.1 Container bci/dotnet-aspnet:5.0 Container bci/dotnet-aspnet:latest Container bci/dotnet-runtime:3.1 Container bci/dotnet-runtime:5.0 Container bci/dotnet-runtime:latest Container bci/dotnet-sdk:3.1 Container bci/dotnet-sdk:5.0 Container bci/dotnet-sdk:latest Container bci/golang:1.16 Container bci/golang:1.17 Container bci/golang:latest Container bci/node:12 Container bci/node:14 Container bci/nodejs:latest Container bci/openjdk-devel:11 Container bci/openjdk:latest Container bci/python:3 Container bci/ruby:latest Container caasp/v4/389-ds:1.4.2 Container caasp/v4/busybox:1.34.1 Container caasp/v4/caasp-dex:2.16.0 Container caasp/v4/cert-exporter:2.3.0 Container caasp/v4/cilium-etcd-operator:2.0.5 Container caasp/v4/cilium-init:1.5.3 Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container caasp/v4/cloud-provider-openstack:1.15.0 Container caasp/v4/configmap-reload:0.3.0 Container caasp/v4/coredns:1.6.7 Container caasp/v4/curl:7.60.0 Container caasp/v4/etcd:3.4.13 Container caasp/v4/gangway:3.1.0 Container caasp/v4/grafana:7.5.12 Container caasp/v4/helm-tiller:2.16.12 Container caasp/v4/hyperkube:v1.17.17 Container caasp/v4/k8s-sidecar:0.1.75 Container caasp/v4/kube-state-metrics:1.9.3 Container caasp/v4/kubernetes-client:1.17.17 Container caasp/v4/kucero:1.3.0 Container caasp/v4/kured:1.3.0 Container caasp/v4/metrics-server:0.3.6 Container caasp/v4/prometheus-alertmanager:0.16.2 Container caasp/v4/prometheus-node-exporter:1.1.2 Container caasp/v4/prometheus-pushgateway:0.6.0 Container caasp/v4/prometheus-server:2.7.1 Container caasp/v4/rsyslog:8.39.0 Container caasp/v4/skuba-tooling:0.1.0 Container caasp/v4/test-update:beta Container caasp/v4/velero-plugin-for-aws:1.0.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 Container caasp/v4/velero-restic-restore-helper:1.3.1 Container caasp/v4/velero:1.3.1 Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container ses/7.1/ceph/grafana:latest Container ses/7.1/ceph/haproxy:latest Container ses/7.1/ceph/keepalived:latest Container ses/7.1/ceph/prometheus-alertmanager:latest Container ses/7.1/ceph/prometheus-node-exporter:latest Container ses/7.1/ceph/prometheus-server:latest Container ses/7.1/ceph/prometheus-snmp_notifier:latest Container ses/7.1/cephcsi/cephcsi:latest Container ses/7.1/cephcsi/csi-attacher:v4.1.0 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 Container ses/7.1/cephcsi/csi-resizer:v1.7.0 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 Container ses/7.1/rook/ceph:latest Container ses/7/ceph/ceph:latest Container ses/7/ceph/grafana:latest Container ses/7/ceph/prometheus-alertmanager:latest Container ses/7/ceph/prometheus-node-exporter:latest Container ses/7/ceph/prometheus-server:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/cephcsi/csi-attacher:v2.1.0 Container ses/7/cephcsi/csi-attacher:v3.3.0 Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 Container ses/7/cephcsi/csi-node-driver-registrar:v1.2.0 Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 Container ses/7/cephcsi/csi-provisioner:v1.6.0 Container ses/7/cephcsi/csi-provisioner:v3.0.0 Container ses/7/cephcsi/csi-resizer:v0.4.0 Container ses/7/cephcsi/csi-resizer:v1.3.0 Container ses/7/cephcsi/csi-snapshotter:v2.1.0 Container ses/7/cephcsi/csi-snapshotter:v2.1.1 Container ses/7/cephcsi/csi-snapshotter:v4.2.0 Container ses/7/prometheus-webhook-snmp:latest Container ses/7/rook/ceph:latest Container suse/pcp:latest Container suse/rmt-mariadb-client:latest Container suse/rmt-mariadb:latest Container suse/rmt-nginx:latest Container suse/rmt-server:latest Container suse/sle-micro/5.0/toolbox:latest Container suse/sle15:15.1 Container suse/sle15:15.3 Container suse/sles/15.2/virt-api:0.38.1 Container suse/sles/15.2/virt-controller:0.38.1 Container suse/sles/15.2/virt-handler:0.38.1 Container suse/sles/15.2/virt-launcher:0.38.1 Container suse/sles/15.2/virt-operator:0.38.1 Container suse/sles/15.3/cdi-apiserver:1.37.1 Container suse/sles/15.3/cdi-cloner:1.37.1 Container suse/sles/15.3/cdi-controller:1.37.1 Container suse/sles/15.3/cdi-importer:1.37.1 Container suse/sles/15.3/cdi-operator:1.37.1 Container suse/sles/15.3/cdi-uploadproxy:1.37.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1 Container suse/sles/15.3/libguestfs-tools:0.45.0 Container suse/sles/15.3/virt-api:0.45.0 Container suse/sles/15.3/virt-controller:0.45.0 Container suse/sles/15.3/virt-handler:0.45.0 Container suse/sles/15.3/virt-launcher:0.45.0 Container suse/sles/15.3/virt-operator:0.45.0 Container trento/trento-db:latest Container trento/trento-runner:latest Image SLES15-SP3-EC2-ECS-HVM Image SLES15-SP3-EC2-HVM Image SLES15-SP3-GCE Image SLES15-SP3-HPC-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-BYOS-GCE Image SLES15-SP3-SAP-Azure Image SLES15-SP3-SAP-EC2-HVM Image SLES15-SP3-SAP-GCE SUSE Linux Enterprise Module for Basesystem 15 SP1 libssh4-0.8.7-10.12.1 libssh4-32bit-0.8.7-10.12.1 libssh-devel-0.8.7-10.12.1 libssh4-64bit-0.8.7-10.12.1 libssh4-0.8.7-10.12.1 as a component of Container bci/bci-init:15.3 libssh4-0.8.7-10.12.1 as a component of Container bci/dotnet-aspnet:3.1 libssh4-0.8.7-10.12.1 as a component of Container bci/dotnet-aspnet:5.0 libssh4-0.8.7-10.12.1 as a component of Container bci/dotnet-aspnet:latest libssh4-0.8.7-10.12.1 as a component of Container bci/dotnet-runtime:3.1 libssh4-0.8.7-10.12.1 as a component of Container bci/dotnet-runtime:5.0 libssh4-0.8.7-10.12.1 as a component of Container bci/dotnet-runtime:latest libssh4-0.8.7-10.12.1 as a component of Container bci/dotnet-sdk:3.1 libssh4-0.8.7-10.12.1 as a component of Container bci/dotnet-sdk:5.0 libssh4-0.8.7-10.12.1 as a component of Container bci/dotnet-sdk:latest libssh4-0.8.7-10.12.1 as a component of Container bci/golang:1.16 libssh4-0.8.7-10.12.1 as a component of Container bci/golang:1.17 libssh4-0.8.7-10.12.1 as a component of Container bci/golang:latest libssh4-0.8.7-10.12.1 as a component of Container bci/node:12 libssh4-0.8.7-10.12.1 as a component of Container bci/node:14 libssh4-0.8.7-10.12.1 as a component of Container bci/nodejs:latest libssh4-0.8.7-10.12.1 as a component of Container bci/openjdk-devel:11 libssh4-0.8.7-10.12.1 as a component of Container bci/openjdk:latest libssh4-0.8.7-10.12.1 as a component of Container bci/python:3 libssh4-0.8.7-10.12.1 as a component of Container bci/ruby:latest libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/389-ds:1.4.2 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/busybox:1.34.1 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/caasp-dex:2.16.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/cert-exporter:2.3.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/cilium-etcd-operator:2.0.5 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/cilium-init:1.5.3 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/cilium-operator:1.6.6 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/cilium:1.6.6 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/cloud-provider-openstack:1.15.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/configmap-reload:0.3.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/coredns:1.6.7 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/curl:7.60.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/etcd:3.4.13 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/gangway:3.1.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/grafana:7.5.12 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/helm-tiller:2.16.12 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/hyperkube:v1.17.17 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/kube-state-metrics:1.9.3 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/kubernetes-client:1.17.17 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/kucero:1.3.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/kured:1.3.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/metrics-server:0.3.6 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/prometheus-alertmanager:0.16.2 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/prometheus-node-exporter:1.1.2 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/prometheus-pushgateway:0.6.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/prometheus-server:2.7.1 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/rsyslog:8.39.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/skuba-tooling:0.1.0 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/test-update:beta libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/velero-plugin-for-aws:1.0.1 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/velero-plugin-for-gcp:1.0.1 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/velero-restic-restore-helper:1.3.1 libssh4-0.8.7-10.12.1 as a component of Container caasp/v4/velero:1.3.1 libssh4-0.8.7-10.12.1 as a component of Container ses/6/cephcsi/cephcsi:latest libssh4-0.8.7-10.12.1 as a component of Container ses/6/rook/ceph:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/ceph/grafana:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/ceph/haproxy:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/ceph/keepalived:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/ceph/prometheus-server:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 libssh4-0.8.7-10.12.1 as a component of Container ses/7.1/rook/ceph:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7/ceph/ceph:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7/ceph/grafana:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7/ceph/prometheus-alertmanager:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7/ceph/prometheus-node-exporter:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7/ceph/prometheus-server:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/cephcsi:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-attacher:v2.1.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-attacher:v3.3.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-node-driver-registrar:v1.2.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-provisioner:v1.6.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-provisioner:v3.0.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-resizer:v0.4.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-resizer:v1.3.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-snapshotter:v2.1.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-snapshotter:v2.1.1 libssh4-0.8.7-10.12.1 as a component of Container ses/7/cephcsi/csi-snapshotter:v4.2.0 libssh4-0.8.7-10.12.1 as a component of Container ses/7/prometheus-webhook-snmp:latest libssh4-0.8.7-10.12.1 as a component of Container ses/7/rook/ceph:latest libssh4-0.8.7-10.12.1 as a component of Container suse/pcp:latest libssh4-0.8.7-10.12.1 as a component of Container suse/rmt-mariadb-client:latest libssh4-0.8.7-10.12.1 as a component of Container suse/rmt-mariadb:latest libssh4-0.8.7-10.12.1 as a component of Container suse/rmt-nginx:latest libssh4-0.8.7-10.12.1 as a component of Container suse/rmt-server:latest libssh4-0.8.7-10.12.1 as a component of Container suse/sle-micro/5.0/toolbox:latest libssh4-0.8.7-10.12.1 as a component of Container suse/sle15:15.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sle15:15.3 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.2/virt-api:0.38.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.2/virt-controller:0.38.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.2/virt-handler:0.38.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.2/virt-operator:0.38.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/cdi-apiserver:1.37.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/cdi-cloner:1.37.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/cdi-controller:1.37.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/cdi-importer:1.37.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/cdi-operator:1.37.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/cdi-uploadproxy:1.37.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/cdi-uploadserver:1.37.1 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/virt-api:0.45.0 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/virt-controller:0.45.0 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/virt-handler:0.45.0 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 libssh4-0.8.7-10.12.1 as a component of Container suse/sles/15.3/virt-operator:0.45.0 libssh4-0.8.7-10.12.1 as a component of Container trento/trento-db:latest libssh4-0.8.7-10.12.1 as a component of Container trento/trento-runner:latest libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-EC2-ECS-HVM libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-EC2-HVM libssh4-32bit-0.8.7-10.12.1 as a component of Image SLES15-SP3-EC2-HVM libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-GCE libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-HPC-Azure libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-Micro-BYOS-GCE libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-SAP-Azure libssh4-32bit-0.8.7-10.12.1 as a component of Image SLES15-SP3-SAP-Azure libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-SAP-EC2-HVM libssh4-32bit-0.8.7-10.12.1 as a component of Image SLES15-SP3-SAP-EC2-HVM libssh4-0.8.7-10.12.1 as a component of Image SLES15-SP3-SAP-GCE libssh4-32bit-0.8.7-10.12.1 as a component of Image SLES15-SP3-SAP-GCE libssh-devel-0.8.7-10.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libssh4-0.8.7-10.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libssh4-32bit-0.8.7-10.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability. CVE-2020-1730 Container bci/bci-init:15.3:libssh4-0.8.7-10.12.1 Container bci/dotnet-aspnet:3.1:libssh4-0.8.7-10.12.1 Container bci/dotnet-aspnet:5.0:libssh4-0.8.7-10.12.1 Container bci/dotnet-aspnet:latest:libssh4-0.8.7-10.12.1 Container bci/dotnet-runtime:3.1:libssh4-0.8.7-10.12.1 Container bci/dotnet-runtime:5.0:libssh4-0.8.7-10.12.1 Container bci/dotnet-runtime:latest:libssh4-0.8.7-10.12.1 Container bci/dotnet-sdk:3.1:libssh4-0.8.7-10.12.1 Container bci/dotnet-sdk:5.0:libssh4-0.8.7-10.12.1 Container bci/dotnet-sdk:latest:libssh4-0.8.7-10.12.1 Container bci/golang:1.16:libssh4-0.8.7-10.12.1 Container bci/golang:1.17:libssh4-0.8.7-10.12.1 Container bci/golang:latest:libssh4-0.8.7-10.12.1 Container bci/node:12:libssh4-0.8.7-10.12.1 Container bci/node:14:libssh4-0.8.7-10.12.1 Container bci/nodejs:latest:libssh4-0.8.7-10.12.1 Container bci/openjdk-devel:11:libssh4-0.8.7-10.12.1 Container bci/openjdk:latest:libssh4-0.8.7-10.12.1 Container bci/python:3:libssh4-0.8.7-10.12.1 Container bci/ruby:latest:libssh4-0.8.7-10.12.1 Container caasp/v4/389-ds:1.4.2:libssh4-0.8.7-10.12.1 Container caasp/v4/busybox:1.34.1:libssh4-0.8.7-10.12.1 Container caasp/v4/caasp-dex:2.16.0:libssh4-0.8.7-10.12.1 Container caasp/v4/cert-exporter:2.3.0:libssh4-0.8.7-10.12.1 Container caasp/v4/cilium-etcd-operator:2.0.5:libssh4-0.8.7-10.12.1 Container caasp/v4/cilium-init:1.5.3:libssh4-0.8.7-10.12.1 Container caasp/v4/cilium-operator:1.6.6:libssh4-0.8.7-10.12.1 Container caasp/v4/cilium:1.6.6:libssh4-0.8.7-10.12.1 Container caasp/v4/cloud-provider-openstack:1.15.0:libssh4-0.8.7-10.12.1 Container caasp/v4/configmap-reload:0.3.0:libssh4-0.8.7-10.12.1 Container caasp/v4/coredns:1.6.7:libssh4-0.8.7-10.12.1 Container caasp/v4/curl:7.60.0:libssh4-0.8.7-10.12.1 Container caasp/v4/etcd:3.4.13:libssh4-0.8.7-10.12.1 Container caasp/v4/gangway:3.1.0:libssh4-0.8.7-10.12.1 Container caasp/v4/grafana:7.5.12:libssh4-0.8.7-10.12.1 Container caasp/v4/helm-tiller:2.16.12:libssh4-0.8.7-10.12.1 Container caasp/v4/hyperkube:v1.17.17:libssh4-0.8.7-10.12.1 Container caasp/v4/k8s-sidecar:0.1.75:libssh4-0.8.7-10.12.1 Container caasp/v4/kube-state-metrics:1.9.3:libssh4-0.8.7-10.12.1 Container caasp/v4/kubernetes-client:1.17.17:libssh4-0.8.7-10.12.1 Container caasp/v4/kucero:1.3.0:libssh4-0.8.7-10.12.1 Container caasp/v4/kured:1.3.0:libssh4-0.8.7-10.12.1 Container caasp/v4/metrics-server:0.3.6:libssh4-0.8.7-10.12.1 Container caasp/v4/prometheus-alertmanager:0.16.2:libssh4-0.8.7-10.12.1 Container caasp/v4/prometheus-node-exporter:1.1.2:libssh4-0.8.7-10.12.1 Container caasp/v4/prometheus-pushgateway:0.6.0:libssh4-0.8.7-10.12.1 Container caasp/v4/prometheus-server:2.7.1:libssh4-0.8.7-10.12.1 Container caasp/v4/rsyslog:8.39.0:libssh4-0.8.7-10.12.1 Container caasp/v4/skuba-tooling:0.1.0:libssh4-0.8.7-10.12.1 Container caasp/v4/test-update:beta:libssh4-0.8.7-10.12.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:libssh4-0.8.7-10.12.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:libssh4-0.8.7-10.12.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:libssh4-0.8.7-10.12.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:libssh4-0.8.7-10.12.1 Container caasp/v4/velero:1.3.1:libssh4-0.8.7-10.12.1 Container ses/6/cephcsi/cephcsi:latest:libssh4-0.8.7-10.12.1 Container ses/6/rook/ceph:latest:libssh4-0.8.7-10.12.1 Container ses/7.1/ceph/grafana:latest:libssh4-0.8.7-10.12.1 Container ses/7.1/ceph/haproxy:latest:libssh4-0.8.7-10.12.1 Container ses/7.1/ceph/keepalived:latest:libssh4-0.8.7-10.12.1 Container ses/7.1/ceph/prometheus-alertmanager:latest:libssh4-0.8.7-10.12.1 Container ses/7.1/ceph/prometheus-node-exporter:latest:libssh4-0.8.7-10.12.1 Container ses/7.1/ceph/prometheus-server:latest:libssh4-0.8.7-10.12.1 Container ses/7.1/ceph/prometheus-snmp_notifier:latest:libssh4-0.8.7-10.12.1 Container ses/7.1/cephcsi/cephcsi:latest:libssh4-0.8.7-10.12.1 Container ses/7.1/cephcsi/csi-attacher:v4.1.0:libssh4-0.8.7-10.12.1 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0:libssh4-0.8.7-10.12.1 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0:libssh4-0.8.7-10.12.1 Container ses/7.1/cephcsi/csi-resizer:v1.7.0:libssh4-0.8.7-10.12.1 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1:libssh4-0.8.7-10.12.1 Container ses/7.1/rook/ceph:latest:libssh4-0.8.7-10.12.1 Container ses/7/ceph/ceph:latest:libssh4-0.8.7-10.12.1 Container ses/7/ceph/grafana:latest:libssh4-0.8.7-10.12.1 Container ses/7/ceph/prometheus-alertmanager:latest:libssh4-0.8.7-10.12.1 Container ses/7/ceph/prometheus-node-exporter:latest:libssh4-0.8.7-10.12.1 Container ses/7/ceph/prometheus-server:latest:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/cephcsi:latest:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-attacher:v2.1.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-attacher:v3.3.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-livenessprobe:v1.1.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-node-driver-registrar:v1.2.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-provisioner:v1.6.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-provisioner:v3.0.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-resizer:v0.4.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-resizer:v1.3.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-snapshotter:v2.1.0:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-snapshotter:v2.1.1:libssh4-0.8.7-10.12.1 Container ses/7/cephcsi/csi-snapshotter:v4.2.0:libssh4-0.8.7-10.12.1 Container ses/7/prometheus-webhook-snmp:latest:libssh4-0.8.7-10.12.1 Container ses/7/rook/ceph:latest:libssh4-0.8.7-10.12.1 Container suse/pcp:latest:libssh4-0.8.7-10.12.1 Container suse/rmt-mariadb-client:latest:libssh4-0.8.7-10.12.1 Container suse/rmt-mariadb:latest:libssh4-0.8.7-10.12.1 Container suse/rmt-nginx:latest:libssh4-0.8.7-10.12.1 Container suse/rmt-server:latest:libssh4-0.8.7-10.12.1 Container suse/sle-micro/5.0/toolbox:latest:libssh4-0.8.7-10.12.1 Container suse/sle15:15.1:libssh4-0.8.7-10.12.1 Container suse/sle15:15.3:libssh4-0.8.7-10.12.1 Container suse/sles/15.2/virt-api:0.38.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.2/virt-controller:0.38.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.2/virt-handler:0.38.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.2/virt-launcher:0.38.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.2/virt-operator:0.38.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/cdi-apiserver:1.37.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/cdi-cloner:1.37.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/cdi-controller:1.37.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/cdi-importer:1.37.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/cdi-operator:1.37.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/cdi-uploadproxy:1.37.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/virt-api:0.45.0:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/virt-controller:0.45.0:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/virt-handler:0.45.0:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/virt-launcher:0.45.0:libssh4-0.8.7-10.12.1 Container suse/sles/15.3/virt-operator:0.45.0:libssh4-0.8.7-10.12.1 Container trento/trento-db:latest:libssh4-0.8.7-10.12.1 Container trento/trento-runner:latest:libssh4-0.8.7-10.12.1 Image SLES15-SP3-EC2-ECS-HVM:libssh4-0.8.7-10.12.1 Image SLES15-SP3-EC2-HVM:libssh4-0.8.7-10.12.1 Image SLES15-SP3-EC2-HVM:libssh4-32bit-0.8.7-10.12.1 Image SLES15-SP3-GCE:libssh4-0.8.7-10.12.1 Image SLES15-SP3-HPC-Azure:libssh4-0.8.7-10.12.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:libssh4-0.8.7-10.12.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:libssh4-0.8.7-10.12.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:libssh4-0.8.7-10.12.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libssh4-0.8.7-10.12.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libssh4-0.8.7-10.12.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libssh4-0.8.7-10.12.1 Image SLES15-SP3-Micro-BYOS-GCE:libssh4-0.8.7-10.12.1 Image SLES15-SP3-SAP-Azure:libssh4-0.8.7-10.12.1 Image SLES15-SP3-SAP-Azure:libssh4-32bit-0.8.7-10.12.1 Image SLES15-SP3-SAP-EC2-HVM:libssh4-0.8.7-10.12.1 Image SLES15-SP3-SAP-EC2-HVM:libssh4-32bit-0.8.7-10.12.1 Image SLES15-SP3-SAP-GCE:libssh4-0.8.7-10.12.1 Image SLES15-SP3-SAP-GCE:libssh4-32bit-0.8.7-10.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libssh-devel-0.8.7-10.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libssh4-0.8.7-10.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libssh4-32bit-0.8.7-10.12.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200967-1/ https://www.suse.com/security/cve/CVE-2020-1730.html CVE-2020-1730 https://bugzilla.suse.com/1168699 SUSE Bug 1168699