Red Hat Security AdvisoryRHSA-2021:4782
openssh security update
Released 2021-11-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openssh-7.4p1-22.el7_9, openssh-askpass-7.4p1-22.el7_9, openssh-clients-7.4p1-22.el7_9 +2
- Red Hat Enterprise Linux Client Optional (v. 7) openssh-cavs-7.4p1-22.el7_9, openssh-ldap-7.4p1-22.el7_9, openssh-server-sysvinit-7.4p1-22.el7_9 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssh-askpass-7.4p1-22.el7_9, openssh-cavs-7.4p1-22.el7_9, openssh-ldap-7.4p1-22.el7_9 +2
- Red Hat Enterprise Linux Server (v. 7) openssh-7.4p1-22.el7_9, openssh-askpass-7.4p1-22.el7_9, openssh-clients-7.4p1-22.el7_9 +2
- Red Hat Enterprise Linux Server Optional (v. 7) openssh-cavs-7.4p1-22.el7_9, openssh-ldap-7.4p1-22.el7_9, openssh-server-sysvinit-7.4p1-22.el7_9 +2
- Red Hat Enterprise Linux Workstation (v. 7) openssh-7.4p1-22.el7_9, openssh-askpass-7.4p1-22.el7_9, openssh-clients-7.4p1-22.el7_9 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssh-cavs-7.4p1-22.el7_9, openssh-ldap-7.4p1-22.el7_9, openssh-server-sysvinit-7.4p1-22.el7_9 +1
Fixes 1 record
Priority LOW 38
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.02545 · Published 2021-09-26 · Partial fix
