Red Hat Security AdvisoryRHSA-2016:0466
openssh security update
Released 2016-03-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssh-5.3p1-114.el6_7, openssh-askpass-5.3p1-114.el6_7, openssh-clients-5.3p1-114.el6_7 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssh-ldap-5.3p1-114.el6_7, pam_ssh_agent_auth-0.9.3-114.el6_7
- Red Hat Enterprise Linux HPC Node (v. 6) openssh-5.3p1-114.el6_7, openssh-clients-5.3p1-114.el6_7, openssh-server-5.3p1-114.el6_7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssh-askpass-5.3p1-114.el6_7, openssh-ldap-5.3p1-114.el6_7, pam_ssh_agent_auth-0.9.3-114.el6_7
- Red Hat Enterprise Linux Server (v. 6) openssh-5.3p1-114.el6_7, openssh-askpass-5.3p1-114.el6_7, openssh-clients-5.3p1-114.el6_7 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssh-ldap-5.3p1-114.el6_7, pam_ssh_agent_auth-0.9.3-114.el6_7, pam_ssh_agent_auth-0.9.3-114.el6_7.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssh-5.3p1-114.el6_7, openssh-askpass-5.3p1-114.el6_7, openssh-clients-5.3p1-114.el6_7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssh-ldap-5.3p1-114.el6_7, pam_ssh_agent_auth-0.9.3-114.el6_7
Fixes 2 records
Priority MEDIUM 62
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_a…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.3553 · Published 2016-03-22 · Partial fix CWE-93
Priority MEDIUM 49
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attac…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.09377 · Published 2015-08-03 · Partial fix CWE-400
