Red Hat Security Advisory

RHSA-2009:1470

openssh security update

Released 2009-09-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) openssh-4.3p2-36.el5_4.2, openssh-4.3p2-36.el5_4.2.i386, openssh-4.3p2-36.el5_4.2.ia64 +13
Red Hat Enterprise Linux Desktop (v. 5 client) openssh-4.3p2-36.el5_4.2, openssh-4.3p2-36.el5_4.2.i386, openssh-askpass-4.3p2-36.el5_4.2 +5

Fixes 1 record

TI-2009-02766 CVE-2009-2904 · GHSA-73m8-jfrm-fr4j

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in…

LOW 30

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to s…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00318 Published 2009-10-01 Fixed CWE-16