Skip to content
OpenAdvisories
Medium ELSA-2023-2645 1 CVE

Moderate: openssh security update (Oracle Linux 9)

Published May 17, 2023 · Updated May 17, 2023

Ecosystem: Oracle Linux

Summary

[8.7p1-29]
- Resolve possible self-DoS with some clients
Resolves: rhbz#2186473

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 9 openssh 0:8.7p1-29.el9_2
Oracle Linux · 9 openssh-askpass 0:8.7p1-29.el9_2
Oracle Linux · 9 openssh-clients 0:8.7p1-29.el9_2
Oracle Linux · 9 openssh-keycat 0:8.7p1-29.el9_2
Oracle Linux · 9 openssh-server 0:8.7p1-29.el9_2
Oracle Linux · 9 pam_ssh_agent_auth 0:0.10.4-5.29.el9_2

Vulnerabilities 1

  • Unscored —
    CVE-2023-25136 Public exploit EPSS 90%

    OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed …

    openssh openssh Debian Wolfi