MGASA-2014-0166 Updated openssh packages fix CVE-2014-2653

Updated openssh packages fix security vulnerability: Matthew Vernon reported that if a SSH server offers a HostCertificate that the ssh client doesn't accept, then the client doesn't check the DNS for SSHFP records. As a consequence a malicious server can disable SSHFP-checking by presenting a...

CVE-2014-2653

The verifyhostkey function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate...

PT-2014-1797

Name of the Vulnerable Software and Affected Versions OpenSSH versions 6.6 and earlier Description The issue allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate. This can lead to a bypass of security restrictions. Exploitation of th...