RHSA-2016:0741Medium

Red Hat Security Advisory: openssh security, bug fix, and enhancement update

Published
May 10, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (4)

CVE-2015-5352 →CVE-2015-6563 →CVE-2015-6564 →CVE-2016-1908 →

📋 Description

CVE-2015-5352 — openssh: XSECURITY restrictions bypass under certain conditions in ssh(1) CVE-2015-6563 — openssh: Privilege separation weakness related to PAM support CVE-2015-6564 — openssh: Use-after-free bug related to PAM support CVE-2016-1908 — openssh: possible fallback from untrusted to trusted X11 forwarding

🎯 Affected products90

  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • openssh-0:5.3p1-117.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • openssh-0:5.3p1-117.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • openssh-0:5.3p1-117.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • openssh-0:5.3p1-117.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • openssh-0:5.3p1-117.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • openssh-0:5.3p1-117.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • openssh-0:5.3p1-117.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • openssh-0:5.3p1-117.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • openssh-0:5.3p1-117.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • openssh-0:5.3p1-117.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • openssh-0:5.3p1-117.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • openssh-0:5.3p1-117.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • openssh-0:5.3p1-117.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • openssh-askpass-0:5.3p1-117.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • openssh-askpass-0:5.3p1-117.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • openssh-askpass-0:5.3p1-117.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • openssh-askpass-0:5.3p1-117.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • openssh-askpass-0:5.3p1-117.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • openssh-askpass-0:5.3p1-117.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • openssh-askpass-0:5.3p1-117.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • openssh-askpass-0:5.3p1-117.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • openssh-askpass-0:5.3p1-117.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • +60 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the OpenSSH server daemon (sshd) will be restarted automatically.

🔗 References (12)