Red Hat Security AdvisoryRHSA-2024:1196
Red Hat JBoss Enterprise Application Platform 7.4 security update
Released 2024-03-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-apache-sshd-2.12.1-1.redhat_00001.1.el7eap
- Red Hat JBoss EAP 7.4 for RHEL 8 eap7-apache-sshd-2.12.1-1.redhat_00001.1.el8eap
- Red Hat JBoss EAP 7.4 for RHEL 9 eap7-apache-sshd-2.12.1-1.redhat_00001.1.el9eap
Fixes 1 record
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
