Fedora 25 : openssh (2016-94293f91e8)

This update brings the fix NULL dereference Security and support for Crypto-Policies for F26 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora Update for openssh FEDORA-2016-2d90928b5b

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : openssh (ELSA-2016-2588)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2588 advisory. - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1329191 Tenable has extracted the preceding description block directly from th...

openssh security, bug fix, and enhancement update

6.6.1p1-31 + 0.9.3-9 - Do not depend on selinux-policy 1373297 6.6.1p1-30 + 0.9.3-9 - Drop dependency on libcap-ng for ssh-keycat 1357859 6.6.1p1-29 + 0.9.3-9 - Rework SELinux context handling with chroot using libcap-ng 1357859 6.6.1p1-28 + 0.9.3-9 - SFTP force permission collision with umask...

Security fix for the ALT Linux 6 package openssh version 6.7p1-alt1.M60P.4

6.7p1-alt1.M60P.4 built Nov. 8, 2016 Gleb Fotengauer-Malinovskiy in task 172047 Nov. 8, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-5352, CVE-2015-6563, CVE-2015-6564...

Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.4

6.7p1-alt1.M70P.4 built Nov. 8, 2016 Gleb Fotengauer-Malinovskiy in task 172046 Nov. 8, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-5352, CVE-2015-6563, CVE-2015-6564...

RedHat Update for openssh RHSA-2016:2588-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : openssh (RHSA-2016:2588)

An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: Red Hat Security Advisory: openssh security, bug fix, and enhancement update

An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

openssh: privilege escalation via user's PAM environment and UseLogin=yes

It was discovered that the OpenSSH sshd daemon fetched PAM environment settings before running the login program. In configurations with UseLogin=yes and the pamenv PAM module configured to read user environment settings, a local user could use this flaw to execute arbitrary code as root...

FreeBSD-SA-16:33.openssh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:33.openssh Security Advisory The FreeBSD Project Topic: OpenSSH Remote Denial of Service vulnerability Category: contrib Module: OpenSSH Announced: 2016-11-0...

FreeBSD : FreeBSD -- OpenSSH Remote Denial of Service vulnerability (6a2cfcdc-9dea-11e6-a298-14dae9d210b8)

When processing the SSHMSGKEXINIT message, the server could allocate up to a few hundreds of megabytes of memory per each connection, before any authentication take place. Impact : A remote attacker may be able to cause a SSH server to allocate an excessive amount of memory. Note that the default...

OpenBSD OpenSSH 3.9 Port Bounce Vulnerability

OpenSSH is prone to privilege escalation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh"; ifdescription...

ssh-audit - SSH Server Auditing

ssh-audit is a tool for ssh server auditing. Features SSH1 and SSH2 protocol server support; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm information...

F5 BIG-IP - OpenSSH vulnerability CVE-2016-6515

The authpassword function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. SPDX-FileCopyrightText: 2016 Greenbone AG Some text description...

Security fix for the ALT Linux 8 package openssh version 7.2p2-alt2

7.2p2-alt2 built Oct. 21, 2016 Gleb Fotengauer-Malinovskiy in task 171162 Oct. 20, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-8325, CVE-2016-6210, CVE-2016-8858...

CVE-2016-8858

DISPUTED The kexinputkexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service memory consumption by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."...

Security fix for the ALT Linux 6 package openssh version 6.7p1-alt1.M60P.3

6.7p1-alt1.M60P.3 built Oct. 20, 2016 Gleb Fotengauer-Malinovskiy in task 171156 Oct. 20, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-8325, CVE-2016-6210, CVE-2016-8858...

F5 Networks BIG-IP : OpenSSH vulnerability (K31510510)

The authpassword function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. CVE-2016-6515 C Tenable Network Security, Inc. The descriptive...

Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.3

6.7p1-alt1.M70P.3 built Oct. 20, 2016 Gleb Fotengauer-Malinovskiy in task 171155 Oct. 20, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-8325, CVE-2016-6210, CVE-2016-8858...