Security update for libssh2_org

Announcement ID:	SUSE-SU-2019:0655-1
Rating:	moderate
References:	bsc#1091236 bsc#1128471 bsc#1128472 bsc#1128474 bsc#1128476 bsc#1128480 bsc#1128481 bsc#1128490 bsc#1128492 bsc#1128493
Cross-References:	CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863
CVSS scores:	CVE-2019-3855 ( SUSE ): 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVE-2019-3855 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-3855 ( NVD ): 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-3856 ( SUSE ): 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVE-2019-3856 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-3856 ( NVD ): 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-3857 ( SUSE ): 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVE-2019-3857 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-3857 ( NVD ): 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-3858 ( SUSE ): 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L CVE-2019-3858 ( NVD ): 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2019-3859 ( SUSE ): 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVE-2019-3859 ( NVD ): 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2019-3860 ( SUSE ): 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVE-2019-3860 ( NVD ): 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2019-3861 ( SUSE ): 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVE-2019-3861 ( NVD ): 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2019-3862 ( SUSE ): 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVE-2019-3862 ( NVD ): 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2019-3863 ( SUSE ): 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L CVE-2019-3863 ( NVD ): 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:	Magnum Orchestration 7 SUSE CaaS Platform 3.0 SUSE Container as a Service Platform 1.0 SUSE Container as a Service Platform 2.0 SUSE Enterprise Storage 4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP2 SUSE Linux Enterprise High Performance Computing 12 SP3 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Point of Service Image Server 12 12-SP2 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 LTSS 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1 LTSS 12-SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 SUSE Linux Enterprise Server 12 SP2 ESPOS 12-SP2 SUSE Linux Enterprise Server 12 SP2 LTSS 12-SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE OpenStack Cloud 7

An update that solves nine vulnerabilities and has one security fix can now be installed.

Description:

This update for libssh2_org fixes the following issues:

Security issues fixed:

• CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490).
• CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet (bsc#1128492).
• CVE-2019-3860: Fixed Out-of-bounds reads with specially crafted SFTP packets (bsc#1128481).
• CVE-2019-3863: Fixed an Integer overflow in user authenticate keyboard interactive which could allow out-of-bounds writes with specially crafted keyboard responses (bsc#1128493).
• CVE-2019-3856: Fixed a potential Integer overflow in keyboard interactive handling which could allow out-of-bounds write with specially crafted payload (bsc#1128472).
• CVE-2019-3859: Fixed Out-of-bounds reads with specially crafted payloads due to unchecked use of _libssh2_packet_require and _libssh2_packet_requirev (bsc#1128480).
• CVE-2019-3855: Fixed a potential Integer overflow in transport read which could allow out-of-bounds write with specially crafted payload (bsc#1128471).
• CVE-2019-3858: Fixed a potential zero-byte allocation which could lead to an out-of-bounds read with a specially crafted SFTP packet (bsc#1128476).
• CVE-2019-3857: Fixed a potential Integer overflow which could lead to zero-byte allocation and out-of-bounds with specially crafted message channel request SSH packet (bsc#1128474).

Other issue addressed:

• Libbssh2 will stop using keys unsupported types in the known_hosts file (bsc#1091236).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE OpenStack Cloud 7
  zypper in -t patch SUSE-OpenStack-Cloud-7-2019-655=1
• Magnum Orchestration 7
  zypper in -t patch SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-655=1
• SUSE Linux Enterprise Desktop 12 SP3
  zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2019-655=1
• SUSE Linux Enterprise Desktop 12 SP4
  zypper in -t patch SUSE-SLE-DESKTOP-12-SP4-2019-655=1
• SUSE Linux Enterprise Point of Service Image Server 12 12-SP2
  zypper in -t patch SUSE-SLE-POS-12-SP2-CLIENT-2019-655=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP1
  zypper in -t patch SUSE-SLE-SAP-12-SP1-2019-655=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP2
  zypper in -t patch SUSE-SLE-SAP-12-SP2-2019-655=1
• SUSE Linux Enterprise Software Development Kit 12 SP3
  zypper in -t patch SUSE-SLE-SDK-12-SP3-2019-655=1
• SUSE Linux Enterprise Software Development Kit 12 SP4
  zypper in -t patch SUSE-SLE-SDK-12-SP4-2019-655=1
• SUSE Linux Enterprise Server 12 LTSS 12
  zypper in -t patch SUSE-SLE-SERVER-12-2019-655=1
• SUSE Linux Enterprise Server 12 SP1 LTSS 12-SP1
  zypper in -t patch SUSE-SLE-SERVER-12-SP1-2019-655=1
• SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2019-655=1
• SUSE Linux Enterprise Server 12 SP2 ESPOS 12-SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-ESPOS-2019-655=1
• SUSE Linux Enterprise Server 12 SP2 LTSS 12-SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-2019-655=1
• SUSE Linux Enterprise Server 12 SP3
  zypper in -t patch SUSE-SLE-SERVER-12-SP3-2019-655=1
• SUSE Linux Enterprise High Performance Computing 12 SP3
  zypper in -t patch SUSE-SLE-SERVER-12-SP3-2019-655=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP3
  zypper in -t patch SUSE-SLE-SERVER-12-SP3-2019-655=1
• SUSE Linux Enterprise High Performance Computing 12 SP4
  zypper in -t patch SUSE-SLE-SERVER-12-SP4-2019-655=1
• SUSE Linux Enterprise Server 12 SP4
  zypper in -t patch SUSE-SLE-SERVER-12-SP4-2019-655=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4
  zypper in -t patch SUSE-SLE-SERVER-12-SP4-2019-655=1
• SUSE Enterprise Storage 4
  zypper in -t patch SUSE-Storage-4-2019-655=1
• SUSE CaaS Platform 3.0
  To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way.
• SUSE Container as a Service Platform 2.0
  To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way.
• SUSE Container as a Service Platform 1.0
  To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way.

Package List:

• SUSE OpenStack Cloud 7 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• Magnum Orchestration 7 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise Desktop 12 SP3 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Desktop 12 SP4 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Point of Service Image Server 12 12-SP2 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP1 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP2 (ppc64le x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP2 (x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Software Development Kit 12 SP3 (aarch64 ppc64le s390x x86_64)
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-devel-1.4.3-20.3.1
• SUSE Linux Enterprise Software Development Kit 12 SP4 (aarch64 ppc64le s390x x86_64)
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-devel-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 LTSS 12 (ppc64le s390x x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 LTSS 12 (s390x x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP1 LTSS 12-SP1 (ppc64le s390x x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP1 LTSS 12-SP1 (s390x x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP2 ESPOS 12-SP2 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP2 LTSS 12-SP2 (ppc64le s390x x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP2 LTSS 12-SP2 (s390x x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP3 (aarch64 ppc64le s390x x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP3 (s390x x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise High Performance Computing 12 SP3 (aarch64 x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise High Performance Computing 12 SP3 (x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP3 (ppc64le x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP3 (x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise High Performance Computing 12 SP4 (aarch64 x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise High Performance Computing 12 SP4 (x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP4 (aarch64 ppc64le s390x x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise Server 12 SP4 (s390x x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4 (ppc64le x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4 (x86_64)
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE Enterprise Storage 4 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
  • libssh2-1-32bit-1.4.3-20.3.1
  • libssh2-1-debuginfo-32bit-1.4.3-20.3.1
• SUSE CaaS Platform 3.0 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Container as a Service Platform 2.0 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1
• SUSE Container as a Service Platform 1.0 (x86_64)
  • libssh2-1-1.4.3-20.3.1
  • libssh2-1-debuginfo-1.4.3-20.3.1
  • libssh2_org-debugsource-1.4.3-20.3.1

References:

• https://www.suse.com/security/cve/CVE-2019-3855.html
• https://www.suse.com/security/cve/CVE-2019-3856.html
• https://www.suse.com/security/cve/CVE-2019-3857.html
• https://www.suse.com/security/cve/CVE-2019-3858.html
• https://www.suse.com/security/cve/CVE-2019-3859.html
• https://www.suse.com/security/cve/CVE-2019-3860.html
• https://www.suse.com/security/cve/CVE-2019-3861.html
• https://www.suse.com/security/cve/CVE-2019-3862.html
• https://www.suse.com/security/cve/CVE-2019-3863.html
• https://bugzilla.suse.com/show_bug.cgi?id=1091236
• https://bugzilla.suse.com/show_bug.cgi?id=1128471
• https://bugzilla.suse.com/show_bug.cgi?id=1128472
• https://bugzilla.suse.com/show_bug.cgi?id=1128474
• https://bugzilla.suse.com/show_bug.cgi?id=1128476
• https://bugzilla.suse.com/show_bug.cgi?id=1128480
• https://bugzilla.suse.com/show_bug.cgi?id=1128481
• https://bugzilla.suse.com/show_bug.cgi?id=1128490
• https://bugzilla.suse.com/show_bug.cgi?id=1128492
• https://bugzilla.suse.com/show_bug.cgi?id=1128493