No Image

RHSA-2016:0043-1: Moderate: openssh security update

2016-01-15 KENNETH 0

Red Hat Enterprise Linux: Updated openssh packages that fix two security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. CVE-2016-0777, CVE-2016-0778 Source: rhn-errata

No Image

USN-2869-1: OpenSSH vulnerabilities

2016-01-15 KENNETH 0

Ubuntu Security Notice USN-2869-1 14th January, 2016 openssh vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 15.10 Ubuntu 15.04 Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary OpenSSH could be made to expose sensitive information over the network. Software description openssh – secure shell (SSH) for secure access to remote machines Details It was discovered that the OpenSSH client experimental support for resumingconnections contained multiple security issues. A malicious server coulduse this issue to leak client memory to the server, including privateclient user keys. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 15.10: openssh-client 1:6.9p1-2ubuntu0.1 Ubuntu 15.04: openssh-client 1:6.7p1-5ubuntu1.4 Ubuntu 14.04 LTS: openssh-client 1:6.6p1-2ubuntu2.4 Ubuntu 12.04 LTS: openssh-client 1:5.9p1-5ubuntu1.8 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all [ more… ]