Red Hat Security Advisory

RHSA-2022:2013

openssh security, bug fix, and enhancement update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) openssh-askpass-8.0p1-13.el8
Red Hat Enterprise Linux BaseOS (v. 8) openssh-8.0p1-13.el8, openssh-cavs-8.0p1-13.el8, openssh-clients-8.0p1-13.el8 +4

Fixes 1 record

TI-2021-18339 CVE-2021-41617 · GHSA-mxh4-p4w6-g844

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are…

LOW 38

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.02545 Published 2021-09-26 Partial fix