Advisories » MGASA-2016-0108

Updated openssh packages fix security vulnerability

Publication date: 10 Mar 2016
Modification date: 10 Mar 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-3115

Description

Missing sanitisation of untrusted input allows an authenticated user who
is able to request X11 forwarding to inject commands to xauth(1)
(CVE-2016-3115).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17944
• http://www.openssh.com/txt/x11fwd.adv
• http://openwall.com/lists/oss-security/2016/03/10/16
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3115

SRPMS

5/core

• openssh-6.6p1-5.7.mga5