Red Hat Security AdvisoryRHSA-2015:0425
openssh security, bug fix and enhancement update
Released 2015-03-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssh-6.6.1p1-11.el7, openssh-askpass-6.6.1p1-11.el7, openssh-clients-6.6.1p1-11.el7 +2
- Red Hat Enterprise Linux Client Optional (v. 7) openssh-ldap-6.6.1p1-11.el7, openssh-server-sysvinit-6.6.1p1-11.el7, pam_ssh_agent_auth-0.9.3-9.11.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) openssh-6.6.1p1-11.el7, openssh-clients-6.6.1p1-11.el7, openssh-keycat-6.6.1p1-11.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssh-askpass-6.6.1p1-11.el7, openssh-ldap-6.6.1p1-11.el7, openssh-server-sysvinit-6.6.1p1-11.el7 +1
- Red Hat Enterprise Linux Server (v. 7) openssh-6.6.1p1-11.el7, openssh-askpass-6.6.1p1-11.el7, openssh-clients-6.6.1p1-11.el7 +2
- Red Hat Enterprise Linux Server Optional (v. 7) openssh-ldap-6.6.1p1-11.el7, openssh-server-sysvinit-6.6.1p1-11.el7, pam_ssh_agent_auth-0.9.3-9.11.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) openssh-6.6.1p1-11.el7, openssh-askpass-6.6.1p1-11.el7, openssh-clients-6.6.1p1-11.el7 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssh-ldap-6.6.1p1-11.el7, openssh-server-sysvinit-6.6.1p1-11.el7, pam_ssh_agent_auth-0.9.3-9.11.el7
Fixes 2 records
Priority LOW 33
The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01988 · Published 2014-03-27 · Partial fix CWE-20
Priority LOW 22
The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to log in as another user when they are listed in the .k5users file of th…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01833 · Published 2014-12-06 · Fixed CWE-287
