Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality and integrity of protected information

The multiple vulnerabilities of the pamsshagentauth-0.9.3 package for the Red Hat Enterprise Linux operating system may lead to violations of confidentiality and integrity of protected information. These vulnerabilities can be exploited remotely...

pam_ssh_agent_auth: symbol crash leading to glibc error() called incorrectly

A certain Red Hat build of the pamsshagentauth module on Red Hat Enterprise Linux RHEL 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local users to obtain sensitive information from process memory or possibly gain privilege...