Red Hat Security AdvisoryRHSA-2021:4368
openssh security update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) openssh-askpass-8.0p1-10.el8
- Red Hat Enterprise Linux BaseOS (v. 8) openssh-8.0p1-10.el8, openssh-cavs-8.0p1-10.el8, openssh-clients-8.0p1-10.el8 +4
Fixes 1 record
Priority LOW 32
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02949 · Published 2020-06-29 · Partial fix CWE-203