Moderate: openssh security update

🗓️ 09 Nov 2021 09:11:41Reported by AlmaLinuxType

almalinux

almalinux🔗 errata.almalinux.org👁 47 Views

OpenSSH security update for Linux and UNIX systems with algorithm negotiation information leak fi

Reporter	Title	Published	Views	Family All 183
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System	13 May 202110:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System (Sailfish) [CVE-2020-14145].	27 May 202514:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	12 Jan 202120:04	–	ibm
GithubExploit	Exploit for Observable Discrepancy in Openbsd Openssh	17 Oct 202519:10	–	githubexploit
GithubExploit	Exploit for Race Condition in Openbsd Openssh	13 Sep 202501:46	–	githubexploit
Tenable Nessus	Alibaba Cloud Linux 3 : 0188: openssh (ALINUX3-SA-2022:0188)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : openssh (ALSA-2021:4368)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : openssh (CESA-2021:4368)	13 Nov 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : openssh (EulerOS-SA-2021-1159)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1251)	5 Feb 202100:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	8	x86_64	openssh-askpass	8.0p1-10.el8	openssh-askpass-8.0p1-10.el8.x86_64.rpm

Source	Link
vulners	www.vulners.com/cve/CVE-2020-14145

12 Nov 2021 10:20Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.3

CVSS 3.15.9

EPSS0.02057

SSVC

openssh security update linux unix algorithm negotiation information leak fix cve-2020-14145 cvss score almalinux