1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2024-1130

[ELSA-2024-1130] openssh security update

Severity Moderate
Affected Packages 6
CVEs 2
Info Packages References Vulnerabilities

[8.7p1-34.3]
- Fix Terrapin attack (CVE-2023-48795)
Resolves: RHEL-19764
- Forbid shell metasymbols in username/hostname (CVE-2023-51385)
Resolves: RHEL-19822

Package Affected Version
pkg:rpm/oraclelinux/pam_ssh_agent_auth?distro=oraclelinux-9.3 < 0.10.4-5.34.el9_3.3
pkg:rpm/oraclelinux/openssh?distro=oraclelinux-9.3 < 8.7p1-34.el9_3.3
pkg:rpm/oraclelinux/openssh-server?distro=oraclelinux-9.3 < 8.7p1-34.el9_3.3
pkg:rpm/oraclelinux/openssh-keycat?distro=oraclelinux-9.3 < 8.7p1-34.el9_3.3
pkg:rpm/oraclelinux/openssh-clients?distro=oraclelinux-9.3 < 8.7p1-34.el9_3.3
pkg:rpm/oraclelinux/openssh-askpass?distro=oraclelinux-9.3 < 8.7p1-34.el9_3.3
ID
ELSA-2024-1130
Severity
moderate
URL
https://linux.oracle.com/errata/ELSA-2024-1130.html
Published
2024-03-06T00:00:00
(6 months ago)
Modified
2024-03-06T00:00:00
(6 months ago)
Rights
Copyright 2024 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/pam_ssh_agent_auth?distro=oraclelinux-9.3 oraclelinux pam_ssh_agent_auth < 0.10.4-5.34.el9_3.3 oraclelinux-9.3
Affected pkg:rpm/oraclelinux/openssh?distro=oraclelinux-9.3 oraclelinux openssh < 8.7p1-34.el9_3.3 oraclelinux-9.3
Affected pkg:rpm/oraclelinux/openssh-server?distro=oraclelinux-9.3 oraclelinux openssh-server < 8.7p1-34.el9_3.3 oraclelinux-9.3
Affected pkg:rpm/oraclelinux/openssh-keycat?distro=oraclelinux-9.3 oraclelinux openssh-keycat < 8.7p1-34.el9_3.3 oraclelinux-9.3
Affected pkg:rpm/oraclelinux/openssh-clients?distro=oraclelinux-9.3 oraclelinux openssh-clients < 8.7p1-34.el9_3.3 oraclelinux-9.3
Affected pkg:rpm/oraclelinux/openssh-askpass?distro=oraclelinux-9.3 oraclelinux openssh-askpass < 8.7p1-34.el9_3.3 oraclelinux-9.3
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date