Red Hat Security AdvisoryRHSA-2024:4910
openssh security update
Released 2024-07-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.0) openssh-askpass-8.7p1-12.el9_0.3, pam_ssh_agent_auth-0.10.4-4.12.el9_0.3
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) openssh-8.7p1-12.el9_0.3, openssh-clients-8.7p1-12.el9_0.3, openssh-keycat-8.7p1-12.el9_0.3 +1
Fixes 1 record
Priority MEDIUM 55
A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).
CVSS 3.1HIGH 7.0· Network · No auth · No interaction · EPSS 0.27935 · Published 2024-07-08 · Fixed in 8.7p1-38.el9_4.4, 8.7p1-12.el9_0.3 +5 CWE-364