Red Hat Security Advisory

RHSA-2019:3702

openssh security, bug fix, and enhancement update

Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) openssh-askpass-8.0p1-3.el8
Red Hat Enterprise Linux BaseOS (v. 8) openssh-8.0p1-3.el8, openssh-cavs-8.0p1-3.el8, openssh-clients-8.0p1-3.el8 +4

TI-2019-04327 CVE-2019-6111 · GHSA-jr78-hfw4-xp7g

MEDIUM 60

An issue was discovered in OpenSSH 7.9.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.58204 Published 2019-01-31 Partial fix CWE-22

TI-2019-04325 CVE-2019-6109 · GHSA-2pqm-q853-jfvf

LOW 37

An issue was discovered in OpenSSH 7.9.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.03807 Published 2019-01-31 Partial fix CWE-116

TI-2018-14690 CVE-2018-20685 · GHSA-28hp-2gv6-gjp8

LOW 30

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of .

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.03681 Published 2019-01-10 Partial fix CWE-863