Red Hat Security AdvisoryRHSA-2016:2588
openssh security, bug fix, and enhancement update
Released 2016-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssh-6.6.1p1-31.el7, openssh-askpass-6.6.1p1-31.el7, openssh-clients-6.6.1p1-31.el7 +2
- Red Hat Enterprise Linux Client Optional (v. 7) openssh-ldap-6.6.1p1-31.el7, openssh-server-sysvinit-6.6.1p1-31.el7, pam_ssh_agent_auth-0.9.3-9.31.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) openssh-6.6.1p1-31.el7, openssh-clients-6.6.1p1-31.el7, openssh-keycat-6.6.1p1-31.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssh-askpass-6.6.1p1-31.el7, openssh-ldap-6.6.1p1-31.el7, openssh-server-sysvinit-6.6.1p1-31.el7 +1
- Red Hat Enterprise Linux Server (v. 7) openssh-6.6.1p1-31.el7, openssh-askpass-6.6.1p1-31.el7, openssh-clients-6.6.1p1-31.el7 +2
- Red Hat Enterprise Linux Server Optional (v. 7) openssh-ldap-6.6.1p1-31.el7, openssh-server-sysvinit-6.6.1p1-31.el7, pam_ssh_agent_auth-0.9.3-9.31.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) openssh-6.6.1p1-31.el7, openssh-askpass-6.6.1p1-31.el7, openssh-clients-6.6.1p1-31.el7 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssh-ldap-6.6.1p1-31.el7, openssh-server-sysvinit-6.6.1p1-31.el7, pam_ssh_agent_auth-0.9.3-9.31.el7
Fixes 1 record
Priority LOW 37
The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain priv…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00602 · Published 2016-05-01 · Partial fix CWE-1262
