Red Hat Security AdvisoryRHSA-2019:0711
openssh security update
Released 2019-04-09 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openssh-5.3p1-124.el6_10, openssh-askpass-5.3p1-124.el6_10, openssh-clients-5.3p1-124.el6_10 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssh-ldap-5.3p1-124.el6_10, pam_ssh_agent_auth-0.9.3-124.el6_10
- Red Hat Enterprise Linux HPC Node (v. 6) openssh-5.3p1-124.el6_10, openssh-clients-5.3p1-124.el6_10, openssh-server-5.3p1-124.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssh-askpass-5.3p1-124.el6_10, openssh-ldap-5.3p1-124.el6_10, pam_ssh_agent_auth-0.9.3-124.el6_10
- Red Hat Enterprise Linux Server (v. 6) openssh-5.3p1-124.el6_10, openssh-askpass-5.3p1-124.el6_10, openssh-clients-5.3p1-124.el6_10 +1
- Red Hat Enterprise Linux Server Optional (v. 6) openssh-ldap-5.3p1-124.el6_10, pam_ssh_agent_auth-0.9.3-124.el6_10, pam_ssh_agent_auth-0.9.3-124.el6_10.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssh-5.3p1-124.el6_10, openssh-askpass-5.3p1-124.el6_10, openssh-clients-5.3p1-124.el6_10 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssh-ldap-5.3p1-124.el6_10, pam_ssh_agent_auth-0.9.3-124.el6_10
Fixes 1 record
Priority HIGH 71
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c,…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.98675 · Published 2018-08-17 · Partial fix CWE-362
