Red Hat Security AdvisoryRHSA-2016:0043
openssh security update
Released 2016-01-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssh-6.6.1p1-23.el7_2, openssh-askpass-6.6.1p1-23.el7_2, openssh-clients-6.6.1p1-23.el7_2 +2
- Red Hat Enterprise Linux Client Optional (v. 7) openssh-ldap-6.6.1p1-23.el7_2, openssh-server-sysvinit-6.6.1p1-23.el7_2, pam_ssh_agent_auth-0.9.3-9.23.el7_2
- Red Hat Enterprise Linux ComputeNode (v. 7) openssh-6.6.1p1-23.el7_2, openssh-clients-6.6.1p1-23.el7_2, openssh-keycat-6.6.1p1-23.el7_2 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssh-askpass-6.6.1p1-23.el7_2, openssh-ldap-6.6.1p1-23.el7_2, openssh-server-sysvinit-6.6.1p1-23.el7_2 +1
- Red Hat Enterprise Linux Server (v. 7) openssh-6.6.1p1-23.el7_2, openssh-askpass-6.6.1p1-23.el7_2, openssh-clients-6.6.1p1-23.el7_2 +2
- Red Hat Enterprise Linux Server Optional (v. 7) openssh-ldap-6.6.1p1-23.el7_2, openssh-server-sysvinit-6.6.1p1-23.el7_2, pam_ssh_agent_auth-0.9.3-9.23.el7_2 +1
- Red Hat Enterprise Linux Workstation (v. 7) openssh-6.6.1p1-23.el7_2, openssh-askpass-6.6.1p1-23.el7_2, openssh-clients-6.6.1p1-23.el7_2 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssh-ldap-6.6.1p1-23.el7_2, openssh-server-sysvinit-6.6.1p1-23.el7_2, pam_ssh_agent_auth-0.9.3-9.23.el7_2
Fixes 2 records
Priority MEDIUM 64
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buff…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.63468 · Published 2016-01-14 · Fixed CWE-200
Priority MEDIUM 56
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection fi…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.20898 · Published 2016-01-14 · Fixed CWE-119
