Red Hat Security Advisory

RHSA-2023:4413

openssh security update

Released 2023-08-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.6) openssh-askpass-8.0p1-15.el8_6
Red Hat Enterprise Linux BaseOS EUS (v.8.6) openssh-8.0p1-15.el8_6, openssh-cavs-8.0p1-15.el8_6, openssh-clients-8.0p1-15.el8_6 +4

Fixes 1 record

TI-2023-19792 CVE-2023-38408 · GHSA-px36-p9hv-7h2v

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently…

CRITICAL 89

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.797 Published 2023-07-20 Fixed CWE-428