Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Stay Secure with the Latest Linux Advisories

Debian Large Esm H800
Debian

Debian Linux Major Privilege Escalation Denial of Service Issues DSA-6393-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 Linux Kernel Critical Privilege Escalation Issues USN-8576-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H800
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux glib2 Important Integer Underflow Threat RLSA-2026-42090

Calendar White Jul 21, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -3 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraupdate

Fedora 41 openssh Update: CVE-2025-32728 Critical Logic Error Fix

Fixes CVE-2025-32728. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-8896dcbcd0 2025-05-23 03:55:25.327044+00:00 -------------------------------------------------------------------------------- Name : openssh Product : Fedora 41 Version : 9.9p1 Release : 4.fc41 URL : https://www.openssh.org/portable.html Summary : An open source implementation of SSH protocol version 2 Description : SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features. This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both. -------------------------------------------------------------------------------- Update Information: Fixes CVE-2025-32728 -------------------------------------------------------------------------------- ChangeLog: * Mon May 19 2025 Zoltan Fridrich - 9.9p1-4 - CVE-2025-32728: Fix logic error in DisableForwarding option Resolves: rhbz#2358778 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2358778 - CVE-2025-32728 openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2358778 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-8896dcbcd0' at the command line. For more information, refer to the dnfdocumentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora 41 upgrades OpenSSH to resolve CVE-2025-32728, boosting SSH protection for users and infrastructures.. openssh, Fedora 41, CVE-2025-32728, security advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 23, 2025 •Critical Fedora
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianmoderate severity

Debian Bookworm DSA-5601-1 moderate: php-phpseclib3 prefix attack

Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol is prone to a prefix truncation attack, known as the "Terrapin attack". This attack allows a MITM attacker to effect a limited break of the integrity of the early encrypted SSH transport . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5601-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Sebastien Delafond January 12, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : php-phpseclib3 CVE ID : CVE-2023-48795 Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol is prone to a prefix truncation attack, known as the "Terrapin attack". This attack allows a MITM attacker to effect a limited break of the integrity of the early encrypted SSH transport protocol by sending extra messages prior to the commencement of encryption, and deleting an equal number of consecutive messages immediately after encryption starts. Details can be found at https://terrapin-attack.com/ For the stable distribution (bookworm), this problem has been fixed in version 3.0.19-1+deb12u2. We recommend that you upgrade your php-phpseclib3 packages. For the detailed security status of php-phpseclib3 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/php-phpseclib3 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Uncover the insights from Debian Security Advisory DSA-5601-1, which addresses a concerning php-phpseclib3 flaw that affects the integrity of SSH communications.. Debian Security Advisory, php-phpseclib3, SSH Protocol. . LinuxSecurity.com Team

Calendar%202 Jan 12, 2024 Debian
Banner 3 1028x280 1708121785 1771599793
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorydebianopenssh

Debian 10: DLA-3694-1 urgent: OpenSSH command injection and integrity issue

Several vulnerabilities have been discovered in OpenSSH, an implementation of the SSH protocol suite. CVE-2021-41617 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3694-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Santiago Ruano Rincón December 25, 2023 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : openssh Version : 1:7.9p1-10+deb10u4 CVE ID : CVE-2021-41617 CVE-2023-48795 CVE-2023-51385 Debian Bug : 995130 Several vulnerabilities have been discovered in OpenSSH, an implementation of the SSH protocol suite. CVE-2021-41617 It was discovered that sshd failed to correctly initialise supplemental groups when executing an AuthorizedKeysCommand or AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or AuthorizedPrincipalsCommandUser directive has been set to run the command as a different user. Instead these commands would inherit the groups that sshd was started with. CVE-2023-48795 Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol is prone to a prefix truncation attack, known as the "Terrapin attack". This attack allows a MITM attacker to effect a limited break of the integrity of the early encrypted SSH transport protocol by sending extra messages prior to the commencement of encryption, and deleting an equal number of consecutive messages immediately after encryption starts. Details can be found at https://terrapin-attack.com/ CVE-2023-51385 It was discovered that if an invalid user or hostname that contained shell metacharacters was passed to ssh, and a ProxyCommand, LocalCommand directive or "match exec" predicate referenced the user or hostname via expansion tokens, then an attacker who could supply arbitrary user/hostnamesto ssh could potentially perform command injection. The situation could arise in case of git repositories with submodules, where the repository could contain a submodule with shell characters in its user or hostname. For Debian 10 buster, these problems have been fixed in version 1:7.9p1-10+deb10u4. We recommend that you upgrade your openssh packages. For the detailed security status of openssh please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/openssh Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . OpenSSH has been found to have multiple vulnerabilities threatening its security integrity. The Debian LTS notice details these issues and provides critical remediation steps.. OpenSSH Security Advisory, Debian LTS Update, Secure Shell Protocol, OpenSSH Issue. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Dec 26, 2023 •Critical Debian LTS
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoracritical

Fedora 31: FEDORA-2019-91529f19e4 Critical: libssh2 Integer Overflow

- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-91529f19e4 2019-11-07 01:17:00.131678 --------------------------------------------------------------------------------Name : libssh2 Product : Fedora 31 Version : 1.9.0 Release : 3.fc31 URL : https://libssh2.org/ Summary : A library implementing the SSH2 protocol Description : libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS(22), SECSH-USERAUTH(25), SECSH-CONNECTION(23), SECSH-ARCH(20), SECSH-FILEXFER(06)*, SECSH-DHGEX(04), and SECSH-NUMBERS(10). --------------------------------------------------------------------------------Update Information: - fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498) --------------------------------------------------------------------------------ChangeLog: * Wed Oct 30 2019 Kamil Dudka - 1.9.0-3 - fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498) --------------------------------------------------------------------------------References: [ 1 ] Bug #1766903 - CVE-2019-17498 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1766903 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-91529f19e4' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announcemailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora 31 patches libssh2 to resolve integer overflow in SSH termination procedures, boosting overall security posture. Ensure you update promptly for enhanced safety.. libssh2 update, integer overflow fix, Fedora security, SSH disconnect. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 06, 2019 •Critical Fedora
Banner 3 1028x280 1708121785 1771599793
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryimportantinteger overflow

Red Hat: RHSA-2019-2399-01 Important: Libssh2 Integer Overflow Issues

An update for libssh2 is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: libssh2 security update Advisory ID: RHSA-2019:2399-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2399 Issue date: 2019-08-07 CVE Names: CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3863 ==================================================================== 1. Summary: An update for libssh2 is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.3) - x86_64 Red Hat Enterprise Linux Server E4S (v. 7.3) - ppc64le, x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.3) - noarch, x86_64 Red Hat Enterprise Linux Server Optional E4S (v. 7.3) - noarch, ppc64le, x86_64 Red Hat Enterprise Linux Server Optional TUS (v. 7.3) - noarch, x86_64 Red Hat Enterprise Linux Server TUS (v. 7.3) - x86_64 3. Description: The libssh2 packages provide a library that implements the SSH2 protocol. Security Fix(es): * libssh2: Integer overflow in transport read resulting in out of bounds write (CVE-2019-3855) * libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write(CVE-2019-3856) * libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857) * libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes (CVE-2019-3863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing these updated packages, all running applications using libssh2 must be restarted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1687303 - CVE-2019-3855 libssh2: Integer overflow in transport read resulting in out of bounds write 1687304 - CVE-2019-3856 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write 1687305 - CVE-2019-3857 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write 1687313 - CVE-2019-3863 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes 6. Package List: Red Hat Enterprise Linux Server AUS (v. 7.3): Source: libssh2-1.4.3-11.el7_3.1.src.rpm x86_64: libssh2-1.4.3-11.el7_3.1.i686.rpm libssh2-1.4.3-11.el7_3.1.x86_64.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.i686.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.x86_64.rpm Red Hat Enterprise Linux Server E4S (v. 7.3): Source: libssh2-1.4.3-11.el7_3.1.src.rpm ppc64le: libssh2-1.4.3-11.el7_3.1.ppc64le.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.ppc64le.rpm x86_64: libssh2-1.4.3-11.el7_3.1.i686.rpm libssh2-1.4.3-11.el7_3.1.x86_64.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.i686.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.x86_64.rpm Red Hat Enterprise Linux Server TUS (v.7.3): Source: libssh2-1.4.3-11.el7_3.1.src.rpm x86_64: libssh2-1.4.3-11.el7_3.1.i686.rpm libssh2-1.4.3-11.el7_3.1.x86_64.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.i686.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.3): noarch: libssh2-docs-1.4.3-11.el7_3.1.noarch.rpm x86_64: libssh2-debuginfo-1.4.3-11.el7_3.1.i686.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.x86_64.rpm libssh2-devel-1.4.3-11.el7_3.1.i686.rpm libssh2-devel-1.4.3-11.el7_3.1.x86_64.rpm Red Hat Enterprise Linux Server Optional E4S (v. 7.3): noarch: libssh2-docs-1.4.3-11.el7_3.1.noarch.rpm ppc64le: libssh2-debuginfo-1.4.3-11.el7_3.1.ppc64le.rpm libssh2-devel-1.4.3-11.el7_3.1.ppc64le.rpm x86_64: libssh2-debuginfo-1.4.3-11.el7_3.1.i686.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.x86_64.rpm libssh2-devel-1.4.3-11.el7_3.1.i686.rpm libssh2-devel-1.4.3-11.el7_3.1.x86_64.rpm Red Hat Enterprise Linux Server Optional TUS (v. 7.3): noarch: libssh2-docs-1.4.3-11.el7_3.1.noarch.rpm x86_64: libssh2-debuginfo-1.4.3-11.el7_3.1.i686.rpm libssh2-debuginfo-1.4.3-11.el7_3.1.x86_64.rpm libssh2-devel-1.4.3-11.el7_3.1.i686.rpm libssh2-devel-1.4.3-11.el7_3.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2019-3855 https://access.redhat.com/security/cve/CVE-2019-3856 https://access.redhat.com/security/cve/CVE-2019-3857 https://access.redhat.com/security/cve/CVE-2019-3863 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXUq4BNzjgjWX9erEAQgERw//V2cQtRQXnp/xq71BGMmu+YQFaRiGCyRX ta2OmmGCeVH6+NQtDRFE5Nv5M+wa9tFhF0gCFtvSHc7X0oLYm2DwJ0nqh/X9YRAJ sNL5JmEb+Tv+4wyOLZ+/4/hjon/J+3V5fKU07dqb/tuyHbF/LL+cxID411owgnzg hvgPqC2pf8ZlWBQpjmdI3sD7ckG5FYMFLYsQfwKQih4OZ09Ilzi900HMVPKmv61a Uswrt/y8/lAibi3PQ7dNIwvc76OYcX0mcBmi0rJ7lZTQSc9eK9EpFXRr63clUIOo EKgEBgQx7bwbLS2L5kctIYJXoF3TlI0o/M1TM4P+8K+vLvcrs1Y8R9RlVeV+v+JD mEgU9YmmjcmZAWQLoR2aMm5IZI6hZnd7OJEd6TuIwXOLnWjx5t6jae+5+fGim6Zc wwXfbOTA/ffNG9MTIaUF4kHLqLOe0SACLigYjVxOzOBEVNp1GJiA9eeMO676EhrR 80yOKLigwCh31PxYcIPDqWMeftC8IHtqczBsMbNfO83XZGc1JabTa1IilK5+BZyt dT4rzJIEoqKhRFlZ06hCllSpklzcS8/NaKgWXDFN3wco/Pic2padoUpAlxZy6QNS VgID5WH4nMVzkexKzJYrRLmwJcZMcsC7aWVuYbfjkHBRrXez451VMtMDVnPTYYbh JpXWEtWVokk=WG3L -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Red Hat has issued a security advisory highlighting a significant update for libssh2, focusing on the resolution of out-of-bounds vulnerabilities and integer overflow concerns.. libssh2 update, redhat security advisory, important linux updates. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 07, 2019 •Important Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorysecurity issuered hat

Red Hat 2.1 RHSA-2005:481-01 Low: OpenSSH Security Issue

Updated openssh packages that fix a potential security vulnerability and various other bugs are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team.. - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Low: openssh security update Advisory ID: RHSA-2005:481-01 Advisory URL: https://access.redhat.com/errata/RHSA-2005:481.html Issue date: 2005-06-02 Updated on: 2005-06-02 Product: Red Hat Enterprise Linux CVE Names: CAN-2004-0175 - ---------------------------------------------------------------------1. Summary: Updated openssh packages that fix a potential security vulnerability and various other bugs are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64 Red Hat Linux Advanced Workstation 2.1 - ia64 Red Hat Enterprise Linux ES version 2.1 - i386 Red Hat Enterprise Linux WS version 2.1 - i386 3. Problem description: OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. SSH replaces rlogin and rsh, and provides secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over a secure channel. Public key authentication can be used for "passwordless" access to servers. The scp protocol allows a server to instruct a client to write to arbitrary files outside of the current directory. This could potentially cause a security issue if a user uses scp to copy files from a malicious server. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0175 to this issue. These updated packages also correct the followingbug: On systems in which direct ssh access for the root user was disabled by configuration (setting "PermitRootLogin no"), attempts to guess the root password could be judged as sucessful or unsucessful by observing a delay. Users of openssh should upgrade to these updated packages, which contain backported patches to resolve these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. If up2date fails to connect to Red Hat Network due to SSL Certificate Errors, you need to install a version of the up2date client with an updated certificate. The latest version of up2date is available from the Red Hat FTP site and may also be downloaded directly from the RHN website: https://access.redhat.com 5. Bug IDs fixed (http://bugzilla.redhat.com/): 146881 - CAN-2004-0175 malicious ssh server can cause scp to write to arbitrary files 146882 - SSH allows attacker to divine root password 6. RPMs required: Red Hat Enterprise Linux AS (Advanced Server) version 2.1: SRPMS: cbfd591f56a699edc21db98ddbe7f4f0 openssh-3.1p1-18.src.rpm i386: f9a4ad5d4502a22246188c193300b05e openssh-3.1p1-18.i386.rpm f55b10b912864dd554ed4907e62da0a5 openssh-askpass-3.1p1-18.i386.rpm eadfcea8a8dec401a5df795bec13c6cd openssh-askpass-gnome-3.1p1-18.i386.rpm afe0e8f5dceaa347cbde08277f17c3d2 openssh-clients-3.1p1-18.i386.rpm b11eb4ff417d5c52e07b6dcc911cffab openssh-server-3.1p1-18.i386.rpm ia64: 41edd025b8c1085e0bfe7c0a3a922151 openssh-3.1p1-18.ia64.rpm f07ea6b9c163aa0a10d9f192d60e5432 openssh-askpass-3.1p1-18.ia64.rpm 84e4947066a71f613b29320c82d2a862 openssh-askpass-gnome-3.1p1-18.ia64.rpm 09351afec720211c67a4694c848dde3d openssh-clients-3.1p1-18.ia64.rpm 0e0035471647317e577c92c7a8445123 openssh-server-3.1p1-18.ia64.rpm Red Hat Linux Advanced Workstation 2.1: SRPMS: cbfd591f56a699edc21db98ddbe7f4f0 openssh-3.1p1-18.src.rpm ia64: 41edd025b8c1085e0bfe7c0a3a922151 openssh-3.1p1-18.ia64.rpm f07ea6b9c163aa0a10d9f192d60e5432 openssh-askpass-3.1p1-18.ia64.rpm 84e4947066a71f613b29320c82d2a862 openssh-askpass-gnome-3.1p1-18.ia64.rpm 09351afec720211c67a4694c848dde3d openssh-clients-3.1p1-18.ia64.rpm 0e0035471647317e577c92c7a8445123 openssh-server-3.1p1-18.ia64.rpm Red Hat Enterprise Linux ES version 2.1: SRPMS: cbfd591f56a699edc21db98ddbe7f4f0 openssh-3.1p1-18.src.rpm i386: f9a4ad5d4502a22246188c193300b05e openssh-3.1p1-18.i386.rpm f55b10b912864dd554ed4907e62da0a5 openssh-askpass-3.1p1-18.i386.rpm eadfcea8a8dec401a5df795bec13c6cd openssh-askpass-gnome-3.1p1-18.i386.rpm afe0e8f5dceaa347cbde08277f17c3d2 openssh-clients-3.1p1-18.i386.rpm b11eb4ff417d5c52e07b6dcc911cffab openssh-server-3.1p1-18.i386.rpm Red Hat Enterprise Linux WS version 2.1: SRPMS: cbfd591f56a699edc21db98ddbe7f4f0 openssh-3.1p1-18.src.rpm i386: f9a4ad5d4502a22246188c193300b05e openssh-3.1p1-18.i386.rpm f55b10b912864dd554ed4907e62da0a5 openssh-askpass-3.1p1-18.i386.rpm eadfcea8a8dec401a5df795bec13c6cd openssh-askpass-gnome-3.1p1-18.i386.rpm afe0e8f5dceaa347cbde08277f17c3d2 openssh-clients-3.1p1-18.i386.rpm b11eb4ff417d5c52e07b6dcc911cffab openssh-server-3.1p1-18.i386.rpm These packages are GPG signed by Red Hat forsecurity. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-CAN-2004-0175 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2005 Red Hat, Inc. . Red Hat's recent advisory details a crucial update to OpenSSH addressing various security vulnerabilities and bugs, ensuring product safety and stability for users. Red Hat Openssh Update, Low Severity Security Fix, Security Advisory. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jun 02, 2005 •Low Red Hat
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics