Red Hat Security AdvisoryRHSA-2017:0641
openssh security and bug fix update
Released 2017-03-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssh-5.3p1-122.el6, openssh-askpass-5.3p1-122.el6, openssh-clients-5.3p1-122.el6 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssh-ldap-5.3p1-122.el6, pam_ssh_agent_auth-0.9.3-122.el6
- Red Hat Enterprise Linux HPC Node (v. 6) openssh-5.3p1-122.el6, openssh-clients-5.3p1-122.el6, openssh-server-5.3p1-122.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssh-askpass-5.3p1-122.el6, openssh-ldap-5.3p1-122.el6, pam_ssh_agent_auth-0.9.3-122.el6
- Red Hat Enterprise Linux Server (v. 6) openssh-5.3p1-122.el6, openssh-askpass-5.3p1-122.el6, openssh-clients-5.3p1-122.el6 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssh-ldap-5.3p1-122.el6, pam_ssh_agent_auth-0.9.3-122.el6, pam_ssh_agent_auth-0.9.3-122.el6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssh-5.3p1-122.el6, openssh-askpass-5.3p1-122.el6, openssh-clients-5.3p1-122.el6 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssh-ldap-5.3p1-122.el6, pam_ssh_agent_auth-0.9.3-122.el6
Fixes 1 record
Priority LOW 37
The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain priv…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00602 · Published 2016-05-01 · Partial fix CWE-1262
