openssh, pam_ssh_agent_auth security update

CentOS Errata and Security Advisory CESA-2017:0641 An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RedHat Update for openssh RHSA-2017:0641-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : openssh (RHSA-2017:0641)

An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2016-8325

CVE-2016-8325 affects Oracle E-Business Suite, Oracle One-to-One Fulfillment (Internal Operations). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle One-to-O...

Scientific Linux Security Update : openssh on SL7.x x86_64 (20161103)

Security Fixes : - It was discovered that the OpenSSH sshd daemon fetched PAM environment settings before running the login program. In configurations with UseLogin=yes and the pamenv PAM module configured to read user environment settings, a local user could use this flaw to execute arbitrary co...

openssh, pam_ssh_agent_auth security update

CentOS Errata and Security Advisory CESA-2016:2588 An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Oracle Linux 7 : openssh (ELSA-2016-2588)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2588 advisory. - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1329191 Tenable has extracted the preceding description block directly from th...

Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2

7.2p2-alt2 built Oct. 21, 2016 Gleb Fotengauer-Malinovskiy in task 171162 Oct. 20, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-8325, CVE-2016-6210, CVE-2016-8858...

Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.3

6.7p1-alt1.M70P.3 built Oct. 20, 2016 Gleb Fotengauer-Malinovskiy in task 171155 Oct. 20, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-8325, CVE-2016-6210, CVE-2016-8858...

Security fix for the ALT Linux 6 package openssh version 6.7p1-alt1.M60P.3

6.7p1-alt1.M60P.3 built Oct. 20, 2016 Gleb Fotengauer-Malinovskiy in task 171156 Oct. 20, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-8325, CVE-2016-6210, CVE-2016-8858...

FreeBSD : openssh -- sshd -- remote valid user discovery and PAM /bin/login attack (adccefd1-7080-11e6-a2cb-c80aa9043978)

The OpenSSH project reports : sshd8: Mitigate timing differences in password authentication that could be used to discern valid from invalid account names when long passwords were sent and particular password hashing algorithms are in use on the server. CVE-2016-6210, reported by EddieEzra.Harari...

Updated openssh packages fix security vulnerability

The dosetupenv function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pamenvironment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as...

openssh -- sshd -- remote valid user discovery and PAM /bin/login attack

The OpenSSH project reports: sshd8: Mitigate timing differences in password authentication that could be used to discern valid from invalid account names when long passwords were sent and particular password hashing algorithms are in use on the server. CVE-2016-6210, reported by EddieEzra.Harari ...

Fedora 24 : gsi-openssh (2016-99c6bc92df)

Sync with openssh Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 23 : gsi-openssh (2016-d31c00ca51)

Sync with openssh Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 24 : openssh (2016-cce03cc497)

Security fix for CVE-2015-8325: ignore PAM environment vars when UseLogin=yes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

SUSE SLES11 Security Update : openssh (SUSE-SU-2016:1528-1)

openssh was updated to fix three security issues. These security issues were fixed : - CVE-2016-3115: Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH allowed remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related t...

Fedora Update for gsi-openssh FEDORA-2016-99c6bc92df

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : openssh (openSUSE-2016-668)

This update for OpenSSH fixes three security issues. These security issues were fixed : - CVE-2016-3115: Sanitise input for xauth1 bsc970632 - CVE-2016-1908: Prevent X11 SECURITY circumvention when forwarding X11 connections bsc962313 - CVE-2015-8325: Ignore PAM environment when using login...

SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2016:1386-1)

This update for OpenSSH fixes three security issues. These security issues were fixed : - CVE-2016-3115: Sanitise input for xauth1 bsc970632 - CVE-2016-1908: Prevent X11 SECURITY circumvention when forwarding X11 connections bsc962313 - CVE-2015-8325: Ignore PAM environment when using login...