Red Hat Security AdvisoryRHSA-2014:1552
openssh security, bug fix, and enhancement update
Released 2014-10-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssh-5.3p1-104.el6, openssh-askpass-5.3p1-104.el6, openssh-clients-5.3p1-104.el6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssh-ldap-5.3p1-104.el6, pam_ssh_agent_auth-0.9.3-104.el6
- Red Hat Enterprise Linux HPC Node (v. 6) openssh-5.3p1-104.el6, openssh-clients-5.3p1-104.el6, openssh-server-5.3p1-104.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssh-askpass-5.3p1-104.el6, openssh-ldap-5.3p1-104.el6, pam_ssh_agent_auth-0.9.3-104.el6
- Red Hat Enterprise Linux Server (v. 6) openssh-5.3p1-104.el6, openssh-askpass-5.3p1-104.el6, openssh-clients-5.3p1-104.el6 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssh-ldap-5.3p1-104.el6, pam_ssh_agent_auth-0.9.3-104.el6, pam_ssh_agent_auth-0.9.3-104.el6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssh-5.3p1-104.el6, openssh-askpass-5.3p1-104.el6, openssh-clients-5.3p1-104.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssh-ldap-5.3p1-104.el6, pam_ssh_agent_auth-0.9.3-104.el6
Fixes 2 records
Priority LOW 33
The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01988 · Published 2014-03-27 · Partial fix CWE-20
Priority LOW 27
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard c…
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.04751 · Published 2014-03-18 · Partial fix CWE-20
